Policy

Brazil Adds Post-Quantum Algorithms to Its National Certificate System

Brazil added post-quantum algorithms ML-DSA and ML-KEM to its national ICP-Brasil certificate system in early 2026, making it a binding national standard.

ArcQubit Team··2 min read·Updated September 17, 2026
  • post-quantum cryptography
  • federal compliance
  • PQC migration
  • quantum readiness
  • for government

Brazil adds post-quantum algorithms to its national certificate system

3 FEBRUARY 2026, BRASILIA

Brazil added post-quantum algorithms to its national certificate system, ICP-Brasil, through Normative Instruction 35, dated 30 January 2026 and published on 3 February 2026. The instruction brings ML-DSA and ML-KEM into the system, and GOV.BR targeted its first advanced signatures using them in the first half of 2026. The change moves Brazil from discussing post-quantum cryptography to embedding it in national infrastructure.

The step carries legal force. Adding the algorithms to ICP-Brasil makes them part of a binding national standard rather than voluntary guidance. Because ICP-Brasil underpins digital signatures and certificates across Brazilian government and commerce, the change reaches a broad base of users who rely on the system for trusted digital identity.

Certificate systems are a natural place to add post-quantum support. ICP-Brasil anchors digital identity and signatures, so enabling it to issue quantum-resistant certificates protects the signatures and identities that depend on it. By making the algorithms available in the national system, Brazil gives its public and private sectors a sanctioned path to quantum-resistant certificates.

Why it matters. Brazil has made post-quantum algorithms part of a binding national certificate standard, one of the more concrete regulatory steps in the region. Because ICP-Brasil underpins trusted digital identity across the country, the change gives organizations a sanctioned route to quantum-resistant signatures. Entities that rely on ICP-Brasil certificates can plan to adopt the new algorithms as the system and GOV.BR roll them out.

Frequently asked questions

Through Normative Instruction 35, dated 30 January 2026 and published on 3 February 2026, Brazil added the post-quantum algorithms ML-DSA and ML-KEM to its national certificate system, ICP-Brasil. GOV.BR targeted its first advanced signatures using them in the first half of 2026.

Yes. Adding the algorithms to ICP-Brasil makes them part of a binding national standard, not voluntary guidance. ICP-Brasil underpins digital signatures and certificates across Brazilian government and commerce, so the change carries legal weight.

Certificate systems like ICP-Brasil anchor digital identity and signatures. Adding post-quantum algorithms lets the system issue quantum-resistant certificates, which is a concrete step toward protecting the signatures and identities that depend on it against future quantum attack.

Sources

  1. Instituto Nacional de Tecnologia da Informação (ITI), "Normative Instruction 35 on post-quantum algorithms in ICP-Brasil," dated Jan. 30, 2026, published Feb. 3, 2026.

Turn the headline into a plan.

Wherever you are on the 2030 to 2035 timeline, QuTrust builds you a migration roadmap.