Brazil
NIST bloc Standard-takerBrazil's transition is led by ITI, the National Institute of Information Technology, which through Normative Instruction 35 of 2026 has incorporated post-quantum cryptographic algorithms into the national public key infrastructure ICP-Brasil and the GOV.BR electronic signature. The intelligence agency ABIN has developed its own post-quantum library and lists the transition among its priorities, while the cabinet security office GSI advises organisations to plan post-quantum migration of critical systems. Brazilian guidance adopts the NIST post-quantum standards.
Governance credibility
| Criterion | Score | Confidence |
|---|---|---|
| Relevance | 2.0 / 2 | Medium |
| Coherence | 2.0 / 2 | Medium |
| Effectiveness | 1.5 / 2 | Medium |
| Efficiency | 2.0 / 2 | Medium |
| Governance | 2.0 / 2 | Medium |
| Impact | 2.0 / 2 | Medium |
Regulatory basis
- ITI Normative Instruction No. 35/2026 (DOC-ICP-01.01), post-quantum algorithms in ICP-Brasil
- GSI OSIC 15/2024 emerging-technologies cybersecurity guidance
Legal status: Binding
Entities operating within the national public-key infrastructure (ICP-Brasil) and the GOV.BR advanced electronic signature must follow the cryptographic standards in ITI Normative Instruction No. 35/2026, which introduces the NIST post-quantum algorithms ML-DSA (FIPS 204) and ML-KEM into the accepted suites. The obligation is scoped to participants in the official PKI rather than the whole economy. Institutional Security Office guidance recommending wider post-quantum migration planning is advisory.
Standards and algorithms
- Standard families
- NIST FIPS 204
- Algorithms
- ML-DSA
Hybrid stance
None stated
Migration timeline
- 2026ITI Normative Instruction 35 adds post-quantum algorithms to ICP-Brasil and the GOV.BR advanced signature
- 2026ABIN lists the transition to post-quantum cryptography among its intelligence challenges
Governmental and standards bodies
- ITI National Institute of Information Technology, incorporated post-quantum algorithms into ICP-Brasil and the GOV.BR advanced signature through Normative Instruction 35/2026
- ABIN Brazilian Intelligence Agency, developed the libharpia post-quantum cryptographic library and lists the post-quantum transition among its 2026 intelligence challenges
- GSI Institutional Security Office of the Presidency, issued cybersecurity guidance recommending planned post-quantum migration of critical systems
Key institutional documents
- Anatel and IME advance dialogue on national quantum communication infrastructure (Rede Quandanga)
- Quantum computing requires strategic preparation to protect digital systems
- Panorama of the regulation of emerging technologies (GSI webinar)
- OSIC 15/2024 - Information and Cybersecurity Guidance on emerging technologies
- ABIN presents Intelligence Challenges for 2026 (transition to post-quantum cryptography)
- ABIN launches cryptography with post-quantum algorithms for the elections
- Secretary's visit to ITI aims at implementing quantum-resistant algorithms in the public key system
- ITI announces advances in the GOV.BR electronic signature solution (post-quantum adaptation)
- Normative Instruction ITI No. 35/2026 - Standards and Cryptographic Algorithms of ICP-Brasil (PQC)
- ITI publishes Normative Instruction incorporating post-quantum algorithms into ICP-Brasil
Advising on this transition, or your own sector's? Request a briefing →