PQC Migration Planner

NIST IR 8547 puts today's public-key cryptography on a schedule: ECDSA and RSA are deprecated after 2030 and disallowed after 2035. Ten questions about your stack turn those abstract dates into a concrete, prioritized plan — what to start now, what can ride normal upgrade cycles, and where no action is needed at all.

100% local — your answers never leave the browser; they live only in this page's URL

Question 1 of 10

keys 1–4 select · Enter next · ← back

Where is TLS terminated for your public traffic?

Whoever runs the handshake controls your key exchange — and therefore who flips the post-quantum switch.

How it works

The planner is a fixed decision table, not an AI: your answers select and prioritize blocks from a set of engineering recommendations built on the public NIST, CISA and NSA transition timelines (NIST IR 8547, FIPS 203/204/205, CNSA 2.0). Everything runs inside this browser tab — there is no request to any server. Your answers are stored only in the URL fragment (the part after #, which browsers never transmit), so a bookmarked or shared link reproduces both the answers and the plan, person to person, without touching us. The Markdown export and the print view are generated from the same data, locally.

Disclaimer

This is general engineering guidance derived from published timelines and standards, not legal or compliance advice. Regulated deployments should validate the resulting plan against their auditors' and regulators' specific requirements — the planner tells you where to start, not what your obligations are.