ENISA reviews the state of hybrid post-quantum standardization
30 APRIL 2026, ATHENS
The European Union Agency for Cybersecurity, ENISA, reviewed the state of hybrid post-quantum standardization on 30 April 2026. A hybrid scheme combines a classical algorithm with a post-quantum one, so a system stays secure if either later proves weak. The review assessed how far the standardization of two hybrid approaches has progressed.
The headline finding is a gap between the two. Hybrid key agreement is more mature in its standardization, while hybrid signatures lag behind. That distinction matters for organizations weighing hybrid options, because the readiness of a standard affects how confidently they can deploy it and expect interoperability with others.
ENISA frames the document as a status check rather than a recommendation. It describes where standardization stands without telling organizations which scheme to adopt or when. That restraint fits the agency's role here: it informs the European debate on hybrids rather than setting a rule, leaving adoption choices to member states and organizations.
Why it matters. The review gives European organizations an evidence base for judging hybrid options, confirming that key agreement is further along than signatures. It stops short of a recommendation, so it informs rather than directs. Teams considering hybrid deployments can use it to set realistic expectations about which parts of the hybrid picture are ready and which still need standardization work.