Free reference
Government of Canada post-quantum deadlines, with their sources
Three federal documents set the dates: the Cyber Centre's migration roadmap (ITSM.40.001), its recommended contract clauses (ITSM.00.501) and Treasury Board's Security Policy Implementation Notice (SPIN). Each date below links to the document it comes from.
The Cyber Centre's roadmap ITSM.40.001 takes effect.
Source: CCCS ITSM.40.001, Roadmap for the migration to post-quantum cryptography
The Cyber Centre releases ITSM.00.501, Recommended contract clauses for cryptography.
Source: CCCS ITSM.00.501, Recommended contract clauses for cryptography (PDF)
Treasury Board's SPIN on migrating the Government of Canada to post-quantum cryptography takes effect.
Source: Treasury Board SPIN: Migrating the Government of Canada to Post-Quantum Cryptography
Departments develop an initial post-quantum migration plan, and report on migration progress from April 2026, every year after.
Source: CCCS ITSM.40.001, Roadmap for the migration to post-quantum cryptography
ITSM.00.501's example clauses ask that key establishment and digital signature modules support post-quantum algorithms.
Source: CCCS ITSM.00.501, Recommended contract clauses for cryptography (PDF)
Procurement record fields under the SPIN.
Source: Treasury Board SPIN: Migrating the Government of Canada to Post-Quantum Cryptography
Unverified, check the source.
Post-quantum migration of high-priority systems is complete.
Source: CCCS ITSM.40.001, Roadmap for the migration to post-quantum cryptography
Post-quantum migration of the remaining systems is complete.
Source: CCCS ITSM.40.001, Roadmap for the migration to post-quantum cryptography
What a supplier can do now
If a department's contract carries the ITSM.00.501 clauses, check which ones you can answer today, then answer the rest with evidence.
This page is a guide, not legal advice. Dates are as the source documents state them: read the source before you rely on one.