Thailand

Thailand's transition is led by the National Cyber Security Agency through its QUANTA national readiness platform, which now publishes captured guidance, a recommended-standards page and a phased migration roadmap to educate public and private organisations and provide tools and labs for migration. The agency recommends the NIST post-quantum standards, naming FIPS 203 (ML-KEM) for key encapsulation, FIPS 204 (ML-DSA) for digital signatures and FIPS 205 (SLH-DSA) for long-term archival, and sets out a phased roadmap aiming to complete the national transition to quantum-resistant cryptography by 2035. The guidance is advisory rather than a legal obligation, and the Securities and Exchange Commission has begun raising quantum risk with the capital market.

Governance credibility

Governance credibility scores for Thailand, each out of two. Hover or focus a row to highlight its axis.

Criterion	Score	Confidence
Relevance	1.5 / 2	Medium
Coherence	1.0 / 2	Medium
Effectiveness	1.0 / 2	Medium
Efficiency	1.0 / 2	Medium
Governance	1.0 / 2	Medium
Impact	2.0 / 2	Medium

Regulatory basis

• NCSA QUANTA recommended post-quantum cryptography standards and migration roadmap national Guidance

Legal status: Soft law only

There is no binding post-quantum mandate. Thailand's National Cyber Security Agency (NCSA), through its QUANTA platform, issues guidance recommending migration to the NIST post-quantum standards (ML-KEM, ML-DSA, SLH-DSA) on a phased national roadmap to 2035. This is guidance rather than a legal obligation.

Standards and algorithms

Standard families

NIST FIPS 203, FIPS 204, FIPS 205

Algorithms

ML-KEM, ML-DSA, SLH-DSA

Hybrid stance

None stated

Migration timeline

today

2026

2027

2028

2030

2035

20252036

1. 2026Survey and risk assessment of the cryptographic estate
2. 2027Initial transition planning
3. 2028Migration of high-priority systems
4. 2030Plan refinement and review
5. 2035National transition to quantum-resistant cryptography complete

Target completion: 2035

Governmental and standards bodies

• NCSA National Cyber Security Agency, runs the QUANTA national post-quantum readiness platform and the migration roadmap

Key institutional documents

• Recommended Post-Quantum Cryptography Standards (QUANTA) NCSA · T1
• Post-Quantum Cryptography Migration Roadmap (QUANTA) NCSA · T1
• QUANTA: National Post-Quantum Cryptography Readiness Platform NCSA · T1
• Post-Quantum Cryptography NCSA · 2025 · T1

Advising on this transition, or your own sector's? Request a briefing →