An estimate published in May 2026 places the global cost of post-quantum cryptographic migration at approximately $15 billion.
Estimates of this kind are modelled and we treat them as directional. The composition is more informative than the total.
The Algorithms Are Free
The standardised algorithms are public and implementations are widely available. Nothing in the $15 billion is licence cost for the mathematics.
The spend is discovery — working out where vulnerable cryptography is used; replacement — much of it hardware that cannot be upgraded in place; re-certification, which in regulated sectors means repeating validation that took months the first time; and testing, because changing a cryptographic primitive in a payment or medical system is not a routine change.
Regulated Sectors Pay The Most And Move Slowest
The sectors facing the strictest deadlines — financial services, healthcare, critical infrastructure, government contractors — are also the ones where change control is heaviest.
A medical device with cryptography in firmware may require regulatory re-submission. A payment terminal estate is physical hardware in tens of thousands of locations. Neither responds to a deadline the way a web service does.
Who Does Not Have $15 Billion
The recurring pattern in this database applies again. Large regulated organisations will fund this because they must and can.
The water districts in 26-0727, the school districts in 26-0228 and the small processors this desk keeps writing about will not, and their exposure is identical. Migration cost estimates are aggregate figures; the distribution of who can pay them is the part that determines what actually gets migrated.
This is an analysis file built on published estimates, listed below. Cost modelling methodology is not fully public and the figure should be read as an order of magnitude. Corrections: corrections@forensicpost.com.