Germany's BSI 2026 guideline mandates hybrid PQC and ends classical-only key agreement after 2031

heise reports on BSI’s version 2026-01 of Technical Guideline TR-02102-1 (published 23 January 2026), which now requires hybrid constructions combining post-quantum and classical algorithms. Classical key agreement on its own is recommended only until end of 2031 (end of 2030 for highly sensitive data), signatures get a 2036 hybrid deadline, and TLS 1.2 is deprecated because it cannot carry hybrid key exchange.

Read the original at heise online