{"id":5955,"date":"2026-10-14T10:47:08","date_gmt":"2026-10-14T10:47:08","guid":{"rendered":"https:\/\/signmycode.com\/blog\/?p=5955"},"modified":"2026-10-14T10:47:09","modified_gmt":"2026-10-14T10:47:09","slug":"post-quantum-code-signing-what-developers-need-to-know-for-the-quantum-era","status":"publish","type":"post","link":"https:\/\/signmycode.com\/blog\/post-quantum-code-signing-what-developers-need-to-know-for-the-quantum-era\/","title":{"rendered":"Post-Quantum Code Signing: What Developers Need to Know for the Quantum Era"},"content":{"rendered":"\n<h2 class=\"wp-block-heading\">Key Takeaways<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Short is a universal fault of RSA, DSA, and ECDSA. Hashes and AES are not the emergency code-signing issue.<\/li>\n\n\n\n<li>The code signing date is early because signatures have a lifespan beyond the one that created them.<\/li>\n\n\n\n<li>To NIST\u2019s 2030 window for deprecating\/rejecting outdated APIs, firms that sell into government\/critical infrastructure have a window for deprecating\/rejecting outdated firmware and software.<\/li>\n\n\n\n<li>The usual default option is ML-DSA-65. For root diversity and firmware diversity, use SLH-DSA or LMS\/XMSS, respectively.<\/li>\n\n\n\n<li>AWS KMS is already signed with NIST PQC as well as Private CA and <a href=\"https:\/\/signmycode.com\/google-cloud-kms-code-signing\">Google Cloud KMS<\/a>. Microsoft&#8217;s headings are toward CNG and AD CS, and a bit towards Azure Key Vault.<\/li>\n\n\n\n<li>Begin with inventory, dual signing, and private PQC roots. Continue <a href=\"https:\/\/signmycode.com\/buy-code-signing-certificates\">purchasing new code-signing certificates<\/a> (with maturity periods for public PQC products).<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">There is a hard deadline for post-quantum code signing: You sign a certificate in 2026 that may still be needed to check the certificate on a device in 2035 that you can&#8217;t re-flash.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This post covers what PQC signatures are, why RSA\/DSA\/ECDSA doesn&#8217;t work against a CRQC, <a href=\"https:\/\/signmycode.com\/blog\/code-signing-certificate-vs-ssl-certificate\/\">how code signing is different from SSL<\/a>, and what AWS, Google, and MS shipped. Inventory paths. Select an algorithm class. Test dual-sign. Follow cert and KMS roadmaps.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">What is a Post-Quantum Digital Signature?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Authenticity, integrity, and non-repudiation can still be achieved by using a <a href=\"https:\/\/signmycode.com\/blog\/what-is-digital-signature-types-of-digital-signature\/\">digital signature<\/a>. The private key is used for signing something. The public key is valid.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The term \u201cpost-quantum\u201d, however, does not actually imply it is running on a quantum computer. The math is still difficult for classical machines and a future CRQC. It is still able to be executed today with modern CPUs.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>In August 2024<\/strong>, NIST finalised <a href=\"https:\/\/signmycode.com\/blog\/what-is-ml-dsa-crystals-dilithium-the-future-of-digital-signatures-beyond-rsa-and-ecc\/\">ML-DSA<\/a> (FIPS 204, Dilithium) as the general default, and <a href=\"https:\/\/signmycode.com\/blog\/what-is-slh-dsa-hash-based-post-quantum-digital-signature-guide\/\">SLH-DSA<\/a> (FIPS 205, SPHINCS+) as a conservative hash-based fallback. Compact, and also a draft, FN-DSA (FIPS 206, Falcon).<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/signmycode.com\/blog\/what-is-firmware-signing-best-practices-for-firmware-signing-and-security\/\">Firmware<\/a> is already provided for LMS and XMSS (SP 800-208) in case you don&#8217;t ever reuse state. Algorithms, keys, certs, and verifiers are all changed via the change. You do NOT turn a Flag around.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Encryption faces <a href=\"https:\/\/signmycode.com\/blog\/what-is-trust-now-forge-later-tnfl-vs-hndl-attacks-explained\/\">harvest-now-decrypt-later<\/a>. Signatures face forge-later. Signatures, etc.: Code Signing is a Signature Problem.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">What is the Difference between Signatures and Encryption?<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/signmycode.com\/blog\/wp-admin\/post.php?post=5955&amp;action=edit#wpseo-meta-section-social\">Social<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Harvest now, Decrypt later: <\/strong>An attacker stores ciphertext today and decrypts it later. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Signatures are forged later:<\/strong> An attacker might forge a signature after the CRQC. Code signing is a type of signature.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Recommended:<\/strong> <a href=\"https:\/\/signmycode.com\/blog\/aws-kms-embraces-the-quantum-era-with-ml-dsa-digital-signature-support\/\">AWS KMS Embraces the Quantum Era with ML-DSA Digital Signature Support<\/a><\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><a><\/a>How&#8217;s Everybody&#8217;s Digital Signature Story?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The majority of production signing still rests on three families of classical algorithms.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">RSA is based on the factoring of integers. Teams still pick 2048-, 3072-, or 4096-bit keys. The RSA-2048 signature is close to 256 bytes. It is still the most popular method for the majority of public CAs, Authenticode pipelines, and <a href=\"https:\/\/signmycode.com\/resources\/how-to-digitally-sign-java-software-with-code-signing\/\">Java\/JAR signers<\/a>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">DSA is based on the finite-field discrete logarithm problem. It was phased out of use by newer designs. If the quantum computer can break RSA, then it can break DSA. Same threat class.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">ECDSA and EdDSA are based on the elliptic curve discrete logarithm problem. The size of keys and signatures remains small\u2014around 64 bytes for P-256. This size is what they control in modern TLS, mobile apps, and even many <a href=\"https:\/\/signmycode.com\/blog\/what-are-code-signing-certificates-and-provisioning-profiles\/\">code-signing profiles<\/a>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>There&#8217;s one thing they all share:<\/strong> The math problems are still too difficult. This is only true for classical computers.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>These algorithms are already available in a few scenarios: <\/strong><a href=\"https:\/\/signmycode.com\/authenticode-signing\">Authenticode<\/a>, <a href=\"https:\/\/signmycode.com\/java-code-signing\">JAR signing<\/a>, APK signing, Cosign for containers, firmware Secure Boot, NuGet\/npm\/maven packages, CI flows calling KMS Sign via OIDC.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Which Timeline should Developers use to develop Quantum-Safe Signatures?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Schedule for written NIST and CNSA dates. Avoid waiting for a CRQC.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>August 2024: <\/strong>FIPS 203, 204, and 205 are final. Both ML-DSA and SLH-DSA are &#8220;now&#8221; technologies.<\/li>\n\n\n\n<li><strong>November 2024:<\/strong> The planning baseline is IR 8547 (still a draft). The classical public-key crypto will be deprecated after 2030 and disallowed after 2035.<\/li>\n\n\n\n<li><strong><a href=\"https:\/\/signmycode.com\/blog\/pqc-code-signing-in-a-cnsa-2-0-world-preparing-for-the-quantum-leap\/\">CNSA 2.0<\/a><\/strong>: Signing of firmware and software begins now; <strong>going for PQC by 2025; going all-in on NSS by 2030<\/strong>.<\/li>\n\n\n\n<li><strong>2025\u20132026:<\/strong> Lands are supported by <a href=\"https:\/\/signmycode.com\/cloud-code-signing\">Cloud KMS<\/a> and CA.<\/li>\n\n\n\n<li><strong>2033\u20132035: <\/strong>A CRQC-risk planning window is a risk date, rather than a certainty.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">This year&#8217;s binary you sign will last a lifetime beyond any classical default.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>From 2030 onwards<\/strong>, the default key to use is a new RSA\/ECDSA signing key. Classical signatures are not a <a href=\"https:\/\/signmycode.com\/blog\/nist-announces-third-round-candidates-for-post-quantum-digital-signatures\/\">NIST-approved long-term trust root for environments<\/a> that are aligned with NIST. The hybrid is not the end goal; it&#8217;s the stepping stone.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Recommended:<\/strong> <a href=\"https:\/\/signmycode.com\/blog\/google-cloud-kms-introduces-quantum-safe-digital-signatures\/\">Google Cloud KMS Introduces Quantum-Safe Digital Signatures Align with NIST\u2019s PQC Standards<\/a><\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Why Does Shor&#8217;s Break RSA, DSA, and ECDSA?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">It was published in 1994 by Peter Shor. If a large quantum computer were available, we could solve the integer factoring problem and discrete log problem in polynomial time. Factoring is used to protect RSA&#8217;s private key. The discrete log-based cryptographic schemes \u2013 DSA, ECDSA, and EdDSA \u2013 conceal them behind Discrete Logs.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If you can recover the private key from a published public key, you can create signatures that are accepted by any active verifier. This is sufficient for the check to pass. The signatory no longer works for the vendor.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>This is not the Main Story:<\/strong> Grover&#8217;s. It accelerates brute force, hence the larger margin of AES-256 and SHA-384 to keep their approvals. It is not Grover, but Shor, who signs up.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This is a planning problem \u2013 you don&#8217;t need to deal with a CRQC today! This means that even firmware from year 2026 can be in the field when a CRQC is available.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If a person can steal a TLS session key, they can read one conversation. When you mint a key, let the world know it&#8217;s an update to a trusted Windows or IoT; a trusted shipper can send code that every device trusts as yours.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Recommended:<\/strong> <a href=\"https:\/\/signmycode.com\/blog\/windows-code-signing-moves-toward-post-quantum-security-in-2027\/\">Windows Code Signing Moves Toward Post Quantum Security in 2027<\/a><\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Why Code Signing Needs PQC?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Long-lived parts of the root of trust are code and firmware signatures. Understandably, software and firmware signing has been the earliest clock, implemented by <a href=\"https:\/\/signmycode.com\/blog\/pqc-code-signing-in-a-cnsa-2-0-world-preparing-for-the-quantum-leap\/\">NSA&#8217;s CNSA 2.0<\/a>, since software certs last for years, even in the absence of TLS sessions.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The verifier is often not able to be rotated. Secure Boot keys, industrial PLCs, and auto ECUs and medical devices continue to verify the same public key long after your CI has left.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A forged signature is a forged update. That&#8217;s not a leaked chat; that&#8217;s part of the <a href=\"https:\/\/signmycode.com\/blog\/what-is-software-supply-chain-security-comprehensive-guide\/\">supply chain<\/a>. It is malware treated as yours by the OS, bootloader, or app store.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Your pipeline is faster than the public CA, Authenticode, app stores, or OS trust stores. Jump from private roots you control. Dual-sign first. Forget about public PKI.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Recommended:<\/strong> <a href=\"https:\/\/signmycode.com\/blog\/openai-revokes-macos-code-signing-cert-after-axios-supply-chain-hit-actions-required\/\">OpenAI Revokes macOS Code Signing Cert After Axios Supply Chain Hit [Actions Required]<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The risk has the shape of an engineering constraint, rather than a white paper. Artefact size limits, timestamp counter signatures, catalogue files, detached signatures versus attached signatures, and the fact that your HSM&#8217;s Sign API could simply continue to ignore the new algorithm all play a role in whether or not the migration ships.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">What is the Rationale for Dual-Signing the Default Transition?<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Send a classical and a PQC (bearer) certificate for the same artefact, or use a composite or hybrid certificate when dealing with a stack. RSA and ECDSA are still being used by old verifiers. The post-quantum half is for new verifiers. It provides compatibility without any risk to the fleet on the algorithm family.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Recommended:<\/strong> <a href=\"https:\/\/signmycode.com\/blog\/what-is-ml-kem-guide-to-nists-post-quantum-key-encapsulation-mechanism\/\">What Is ML-KEM? Guide to NIST\u2019s Post-Quantum Key Encapsulation Mechanism<\/a><\/p>\n\n\n\n<h2 class=\"wp-block-heading\">How Do RSA and ECDSA Compare to Post-Quantum Signatures?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">\u200bSize changes. The duty of the verifier is not. Look at these as planning-grade figures and validate before a freeze.<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><tbody><tr><td><strong>Scheme<\/strong><\/td><td><strong>Hard problem<\/strong><\/td><td><strong>Typical sig size<\/strong><\/td><td><strong>Keys<\/strong><\/td><td><strong>Quantum status<\/strong><\/td><td><strong>Fit<\/strong><\/td><\/tr><tr><td>RSA-2048<\/td><td>Factoring<\/td><td>~256 B<\/td><td>Large<\/td><td>Breaks under Shor<\/td><td>Legacy only<\/td><\/tr><tr><td>ECDSA P-256<\/td><td>ECDLP<\/td><td>~64 B<\/td><td>Small<\/td><td>Breaks under Shor<\/td><td>Legacy \/ hybrid half<\/td><\/tr><tr><td>ML-DSA-65<\/td><td>Module lattices<\/td><td>~3,309 B<\/td><td>~2 KB pub<\/td><td>NIST primary<\/td><td>General code signing<\/td><\/tr><tr><td>ML-DSA-87<\/td><td>Module lattices<\/td><td>~4,627 B<\/td><td>Larger<\/td><td>Higher assurance<\/td><td>Long-lived \/ CNSA-class<\/td><\/tr><tr><td>SLH-DSA-SHA2-128s<\/td><td>Hash \/ Merkle<\/td><td>~7.8 KB<\/td><td>Tiny pub<\/td><td>Conservative backup<\/td><td>Roots, firmware<\/td><\/tr><tr><td>LMS \/ XMSS<\/td><td>Stateful hash<\/td><td>Often smaller than SLH<\/td><td>State<\/td><td>Already in firmware<\/td><td>Only with HSM-enforced state<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Signatures will be approximately 10\u00d7-50\u00d7 larger than ECDSA. Assess Installer, Packet, and Firmware header sizes. To use stateless ML-DSA in CI. One of the states keeps burning the key for reuse in reused LMS\/XMSS. Verification is cheap. I&#8217;m key management, and verifiers are not.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Which PQC Code-Signing Integrations are Hurriedly Making Their Way to Market?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The first two, Cloud KMS and private CA, are important. That&#8217;s where CI already uses Sign.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">What Has AWS Shipped?<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>June 13, 2025:<\/strong> KMS GA for ML-DSA <em>(`ML_DSA_44` \/ `65` \/ `87`, `ML_DSA_SHAKE_256`, same CreateKey \/ Sign \/ Verify)<\/em>. Firmware and long-lived signatures were flagged by AWS. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The private code-signing roots will be certified by Private CA plus KMS ML-DSA on 17th Nov. 2025. Hybrid PQ-TLS to KMS (<a href=\"https:\/\/signmycode.com\/blog\/what-is-ml-kem-guide-to-nists-post-quantum-key-encapsulation-mechanism\/\">ML-KEM<\/a>) protects the channel (signature is protected by bypass)<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">What Has Google Cloud Shipped?<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>February 20, 2025:<\/strong> Cloud KMS preview of ML-DSA-65 and SLH-DSA-SHA2-128s. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>July 28, 2026:<\/strong> External-\u03bc variants for large payloads for both SLH-DSA and GA for ML-DSA-44\/65\/87. 2028-2029 seems to be the time frame of discussion for org-level talk; the roadmap has firmware keys, and CAS follows this trajectory.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">What&#8217;s Microsoft&#8217;s Stance?<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>SymCrypt announced ML-KEM\/ML-DSA at the end of 2024<\/strong>. The May 2025 is the May edition of the release features the release of insiders, CNG, and Linux SymCrypt-OpenSSL versions.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Late 2025:<\/strong> CNG\/cert APIs on Server 2025 and Win11. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>May 2026: <\/strong>AD CS issues ML-DSA certs (KB5087539). Azure Key Vault\/Managed HSM PQC types are on the fly\u2014pilot as SKUs. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Sept 2026:<\/strong> The Trusted Root pilots test PQC TLS, NOT production Web PKI.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">What is Ready Around the KMS?<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">OpenSSL 3.5+. To see more, check out. NET 10 ships ML-DSA; Go is adding it. The use of Cosign, Sigstore, and public CAs is still lagging. Private pathways are available to prototype. Trails of public code-signing certs.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">What should Developers do for Post-quantum Code Signing?<\/h2>\n\n\n\n<ul start=\"1\" class=\"wp-block-list\">\n<li><strong>Inventory all signs\/verify paths: <\/strong>Authenticode, App Stores, JAR\/APK, Container, <a href=\"https:\/\/signmycode.com\/blog\/what-is-a-software-bill-of-material-sbom-and-supply-chain-security\/\">SBOM<\/a> Attestation, Firmware\/Secure Boot, IDE Plugins, Registries, Timestamp Servers. <\/li>\n\n\n\n<li><strong>Record:<\/strong> algorithm, key length, HSM\/KMS, cert profile, lifetime.<\/li>\n\n\n\n<li><strong>Rank by lifetime. Firms and roots first:<\/strong> The last things that are archived weekly are the CI artefacts.<\/li>\n\n\n\n<li><strong>Make crypto-agile:<\/strong> Be sure to abstract Sign() under an interface. Avoid embedding the name of the hash function into scripts.<\/li>\n\n\n\n<li><strong>Run 4 Pilot runs of ML-DSA-65 (on AWS or GCP now;<\/strong> Azure, as SKU arrives). Use dimensions, latency, and verifier support.<\/li>\n\n\n\n<li><strong>Run 2 copies of a release train:<\/strong> Wait for verifiers to catch up with RSA\/ECDSA.<\/li>\n\n\n\n<li><strong>Fix key custody first:<\/strong> PQC keys still need <a href=\"https:\/\/signmycode.com\/blog\/aws-cloudhsm-vs-aws-kms-choose-the-best-encryption-solution-for-your-business\/\">HSM\/KMS<\/a>, dual control, audit, and no LMS\/XMSS state reuse.<\/li>\n<\/ul>\n\n\n\n<ul start=\"7\" class=\"wp-block-list\">\n<li><strong>Request CA product date<\/strong>, timestamping, OS library version (OpenSSL), CA signatures, and Authenticode\/OS trust from vendors in writing. Javasoft\/JDK (including NET, signtool, jarsigner, and cosign).<\/li>\n\n\n\n<li><strong>Set up a private PQC root for internal artifacts<\/strong>: Take no time to wait for the public to regain its trust.<\/li>\n\n\n\n<li><strong>Budget large catalogues<\/strong>, slower air-gapped verification, and old IoT parsers with fixed buffers.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">What Not To Do?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Not minting a 10-year RSA code sign in 2026 and declaring the problem solved is not quite as satisfactory. Never use multiregion CI for stateful LMS or XMSS without using SSOS for them. Do not use PQ-TLS as a PQC code signature on the KMS endpoint.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">What the Code Signing Future holds for Anyone<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The default is changed from ECDSA and RSA to ML-DSA. Roots and firmware understand the importance of SLH-DSA or LMS\/XMSS in the context of diversity and long life.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The team is sending composite\/hybrid certificates. PQC-only follows verifiers\/trust stores.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Signatures will be reduced in size later in FN-DSA. Wait for 2026\u20132028 work \u2013 don&#8217;t block it.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Public CAs or the public chain are the long pole, as are trust stores and\/or app stores. But if you sign early, you will not have to re-sign any historical builds.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><a><\/a>Conclusion<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Post-quantum code signing is a migration programme and not a switch for a flag on a weekend. Both the algorithm, key, certificate, and verifier are modified simultaneously.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">See NIST and CNSA release notes and dates, plus your CA date. Try to change the old classical certificates as quickly as possible with a short leash. Request your CA to provide you with a PQC\/hybrid code-signing implementation plan. Prototype ML-DSA in CI this Quarter.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Secure the most recent code-signing certificates and a crypto-agile issuance roadmap to be able to include PQC if your CA and verifiers do so.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Key Takeaways There is a hard deadline for post-quantum code signing: You sign a certificate in 2026 that may still be needed to check the certificate on a device in 2035 that you can&#8217;t re-flash. This post covers what PQC signatures are, why RSA\/DSA\/ECDSA doesn&#8217;t work against a CRQC, how code signing is different from&hellip; <a class=\"more-link\" href=\"https:\/\/signmycode.com\/blog\/post-quantum-code-signing-what-developers-need-to-know-for-the-quantum-era\/\">Read More <span class=\"screen-reader-text\">Post-Quantum Code Signing: What Developers Need to Know for the Quantum Era<\/span><\/a> <\/p>\n","protected":false},"author":1,"featured_media":5956,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2,457],"tags":[973,931,971,972],"class_list":["post-5955","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-code-signing-updates","category-developers-guide","tag-code-signing-for-quantum-computing","tag-post-quantum-digital-signature","tag-post-quantum-code-signing","tag-quantum-safe-signatures-2","entry"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.6 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Post Quantum Code Signing: A Guide to Quantum Safe Signatures<\/title>\n<meta name=\"description\" content=\"Prepare code signing for quantum computing. Explore key PQC dates, quantum safe signature algorithms, and next steps for developers.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/signmycode.com\/blog\/post-quantum-code-signing-what-developers-need-to-know-for-the-quantum-era\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Post Quantum Code Signing: A Guide to Quantum Safe Signatures\" \/>\n<meta property=\"og:description\" content=\"Prepare code signing for quantum computing. Explore key PQC dates, quantum safe signature algorithms, and next steps for developers.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/signmycode.com\/blog\/post-quantum-code-signing-what-developers-need-to-know-for-the-quantum-era\/\" \/>\n<meta property=\"og:site_name\" content=\"SignMyCode - Blog\" \/>\n<meta property=\"article:published_time\" content=\"2026-10-14T10:47:08+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-10-14T10:47:09+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/signmycode.com\/blog\/wp-content\/uploads\/2026\/10\/post-quantum-code-signing.webp\" \/>\n\t<meta property=\"og:image:width\" content=\"912\" \/>\n\t<meta property=\"og:image:height\" content=\"453\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Janki Mehta\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:image\" content=\"https:\/\/signmycode.com\/blog\/wp-content\/uploads\/2026\/10\/post-quantum-code-signing.webp\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Janki Mehta\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"10 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/signmycode.com\\\/blog\\\/post-quantum-code-signing-what-developers-need-to-know-for-the-quantum-era\\\/\",\"url\":\"https:\\\/\\\/signmycode.com\\\/blog\\\/post-quantum-code-signing-what-developers-need-to-know-for-the-quantum-era\\\/\",\"name\":\"Post Quantum Code Signing: A Guide to Quantum Safe Signatures\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/signmycode.com\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/signmycode.com\\\/blog\\\/post-quantum-code-signing-what-developers-need-to-know-for-the-quantum-era\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/signmycode.com\\\/blog\\\/post-quantum-code-signing-what-developers-need-to-know-for-the-quantum-era\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/signmycode.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/post-quantum-code-signing.webp\",\"datePublished\":\"2026-10-14T10:47:08+00:00\",\"dateModified\":\"2026-10-14T10:47:09+00:00\",\"description\":\"Prepare code signing for quantum computing. Explore key PQC dates, quantum safe signature algorithms, and next steps for developers.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/signmycode.com\\\/blog\\\/post-quantum-code-signing-what-developers-need-to-know-for-the-quantum-era\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/signmycode.com\\\/blog\\\/post-quantum-code-signing-what-developers-need-to-know-for-the-quantum-era\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/signmycode.com\\\/blog\\\/post-quantum-code-signing-what-developers-need-to-know-for-the-quantum-era\\\/#primaryimage\",\"url\":\"https:\\\/\\\/signmycode.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/post-quantum-code-signing.webp\",\"contentUrl\":\"https:\\\/\\\/signmycode.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/post-quantum-code-signing.webp\",\"width\":912,\"height\":453,\"caption\":\"Post Quantum Code Signing Timeline\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/signmycode.com\\\/blog\\\/post-quantum-code-signing-what-developers-need-to-know-for-the-quantum-era\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/signmycode.com\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Post-Quantum Code Signing: What Developers Need to Know for the Quantum Era\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/signmycode.com\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/signmycode.com\\\/blog\\\/\",\"name\":\"SignMyCode - Blog\",\"description\":\"Code Signing News, Updates\",\"publisher\":{\"@id\":\"https:\\\/\\\/signmycode.com\\\/blog\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/signmycode.com\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/signmycode.com\\\/blog\\\/#organization\",\"name\":\"SignMyCode.com\",\"url\":\"https:\\\/\\\/signmycode.com\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/signmycode.com\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/signmycode.com\\\/blog\\\/wp-content\\\/uploads\\\/2021\\\/10\\\/logo1.png\",\"contentUrl\":\"https:\\\/\\\/signmycode.com\\\/blog\\\/wp-content\\\/uploads\\\/2021\\\/10\\\/logo1.png\",\"width\":135,\"height\":86,\"caption\":\"SignMyCode.com\"},\"image\":{\"@id\":\"https:\\\/\\\/signmycode.com\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Post Quantum Code Signing: A Guide to Quantum Safe Signatures","description":"Prepare code signing for quantum computing. Explore key PQC dates, quantum safe signature algorithms, and next steps for developers.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/signmycode.com\/blog\/post-quantum-code-signing-what-developers-need-to-know-for-the-quantum-era\/","og_locale":"en_US","og_type":"article","og_title":"Post Quantum Code Signing: A Guide to Quantum Safe Signatures","og_description":"Prepare code signing for quantum computing. Explore key PQC dates, quantum safe signature algorithms, and next steps for developers.","og_url":"https:\/\/signmycode.com\/blog\/post-quantum-code-signing-what-developers-need-to-know-for-the-quantum-era\/","og_site_name":"SignMyCode - Blog","article_published_time":"2026-10-14T10:47:08+00:00","article_modified_time":"2026-10-14T10:47:09+00:00","og_image":[{"width":912,"height":453,"url":"https:\/\/signmycode.com\/blog\/wp-content\/uploads\/2026\/10\/post-quantum-code-signing.webp","type":"image\/jpeg"}],"author":"Janki Mehta","twitter_card":"summary_large_image","twitter_image":"https:\/\/signmycode.com\/blog\/wp-content\/uploads\/2026\/10\/post-quantum-code-signing.webp","twitter_misc":{"Written by":"Janki Mehta","Est. reading time":"10 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/signmycode.com\/blog\/post-quantum-code-signing-what-developers-need-to-know-for-the-quantum-era\/","url":"https:\/\/signmycode.com\/blog\/post-quantum-code-signing-what-developers-need-to-know-for-the-quantum-era\/","name":"Post Quantum Code Signing: A Guide to Quantum Safe Signatures","isPartOf":{"@id":"https:\/\/signmycode.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/signmycode.com\/blog\/post-quantum-code-signing-what-developers-need-to-know-for-the-quantum-era\/#primaryimage"},"image":{"@id":"https:\/\/signmycode.com\/blog\/post-quantum-code-signing-what-developers-need-to-know-for-the-quantum-era\/#primaryimage"},"thumbnailUrl":"https:\/\/signmycode.com\/blog\/wp-content\/uploads\/2026\/10\/post-quantum-code-signing.webp","datePublished":"2026-10-14T10:47:08+00:00","dateModified":"2026-10-14T10:47:09+00:00","description":"Prepare code signing for quantum computing. Explore key PQC dates, quantum safe signature algorithms, and next steps for developers.","breadcrumb":{"@id":"https:\/\/signmycode.com\/blog\/post-quantum-code-signing-what-developers-need-to-know-for-the-quantum-era\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/signmycode.com\/blog\/post-quantum-code-signing-what-developers-need-to-know-for-the-quantum-era\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/signmycode.com\/blog\/post-quantum-code-signing-what-developers-need-to-know-for-the-quantum-era\/#primaryimage","url":"https:\/\/signmycode.com\/blog\/wp-content\/uploads\/2026\/10\/post-quantum-code-signing.webp","contentUrl":"https:\/\/signmycode.com\/blog\/wp-content\/uploads\/2026\/10\/post-quantum-code-signing.webp","width":912,"height":453,"caption":"Post Quantum Code Signing Timeline"},{"@type":"BreadcrumbList","@id":"https:\/\/signmycode.com\/blog\/post-quantum-code-signing-what-developers-need-to-know-for-the-quantum-era\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/signmycode.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Post-Quantum Code Signing: What Developers Need to Know for the Quantum Era"}]},{"@type":"WebSite","@id":"https:\/\/signmycode.com\/blog\/#website","url":"https:\/\/signmycode.com\/blog\/","name":"SignMyCode - Blog","description":"Code Signing News, Updates","publisher":{"@id":"https:\/\/signmycode.com\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/signmycode.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/signmycode.com\/blog\/#organization","name":"SignMyCode.com","url":"https:\/\/signmycode.com\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/signmycode.com\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/signmycode.com\/blog\/wp-content\/uploads\/2021\/10\/logo1.png","contentUrl":"https:\/\/signmycode.com\/blog\/wp-content\/uploads\/2021\/10\/logo1.png","width":135,"height":86,"caption":"SignMyCode.com"},"image":{"@id":"https:\/\/signmycode.com\/blog\/#\/schema\/logo\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/signmycode.com\/blog\/wp-json\/wp\/v2\/posts\/5955","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/signmycode.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/signmycode.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/signmycode.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/signmycode.com\/blog\/wp-json\/wp\/v2\/comments?post=5955"}],"version-history":[{"count":2,"href":"https:\/\/signmycode.com\/blog\/wp-json\/wp\/v2\/posts\/5955\/revisions"}],"predecessor-version":[{"id":5959,"href":"https:\/\/signmycode.com\/blog\/wp-json\/wp\/v2\/posts\/5955\/revisions\/5959"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/signmycode.com\/blog\/wp-json\/wp\/v2\/media\/5956"}],"wp:attachment":[{"href":"https:\/\/signmycode.com\/blog\/wp-json\/wp\/v2\/media?parent=5955"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/signmycode.com\/blog\/wp-json\/wp\/v2\/categories?post=5955"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/signmycode.com\/blog\/wp-json\/wp\/v2\/tags?post=5955"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}