Navigating the Post-Quantum Shift: Meta's Framework and Insights for Cryptographic Migration

Introduction

Quantum computing poses a fundamental challenge to the cryptographic systems that secure our digital world. While large-scale quantum computers that can break current public-key encryption remain years away, experts warn that the threat is already tangible through “store now, decrypt later” (SNDL) attacks. In response, organizations like Meta are taking proactive steps to migrate to post-quantum cryptography (PQC). This article shares Meta’s framework, lessons learned, and practical guidance to help other organizations strengthen their resilience as the industry transitions to new PQC standards.

The Quantum Threat and Urgency

Research indicates that quantum computers will eventually break widely used public-key algorithms such as RSA and ECC. Although this capability may be 10–15 years away, sophisticated adversaries can already collect encrypted data today, anticipating future decryption — a strategy known as SNDL. This means that sensitive information transmitted now could be compromised later, even before quantum computers arrive.

To address this risk, standards bodies like the U.S. National Institute of Standards and Technology (NIST) and the UK’s National Cyber Security Centre (NCSC) have published migration guidance, targeting 2030 as a key milestone for critical systems. Their recommendations highlight the challenges of complexity and missing technical capabilities that affect PQC migration plans. The first industry-wide standards — ML-KEM (Kyber) and ML-DSA (Dilithium) — have now been released by NIST, with additional algorithms like HQC on the way. Notably, Meta cryptographers are co-authors of HQC, reflecting the company’s deep commitment to advancing global cryptographic security.

Meta’s Proactive Approach

Meta has taken a proactive stance to prepare for quantum threats. With billions of people relying on its platforms daily, Meta maintains high security and data protection standards. Over a multi-year process, the company has already begun deploying post-quantum encryption across its internal infrastructure, ensuring that strong cryptography protects user data now and in the future. This work has yielded a framework that other organizations can adapt to their own contexts.

Proposed PQC Migration Levels

To manage the complexity of PQC migration across diverse use cases, Meta proposes the concept of PQC Migration Levels. These levels help teams within an organization assess their readiness and prioritize actions. The framework includes the following stages:

1. Risk Assessment — Identify which systems and data are most vulnerable to future quantum attacks, considering SNDL threats.
2. Inventory — Catalog all cryptographic assets, including algorithms, key sizes, protocols, and dependencies.
3. Impact Analysis — Evaluate the effect of replacing each cryptographic component on performance, interoperability, and security.
4. Migration Planning — Develop a phased roadmap, starting with the most critical systems and those with the longest data retention needs.
5. Deployment — Roll out new PQC algorithms (e.g., ML-KEM, ML-DSA, HQC) with appropriate fallback mechanisms and testing.
6. Guardrails — Implement monitoring, alerting, and automated enforcement to ensure continued compliance and rapid detection of issues.
7. Continuous Improvement — Stay abreast of evolving standards and threat intelligence to adapt the migration strategy over time.

These levels provide a structured way for teams to navigate the inherent complexity — especially when multiple cryptographic libraries, protocols, and hardware platforms are involved.

Lessons Learned from Meta’s Migration

Meta’s multi-year deployment has yielded several key takeaways that can benefit the broader community:

• Start early — Even before final standards are finalized, organizations can begin assessing their inventory and identifying dependencies. Meta’s early engagement allowed it to influence algorithm selection (e.g., HQC) and shape internal tooling.
• Embrace cryptographic agility — Systems designed to swap algorithms easily reduce future migration costs. Meta recommends building modular cryptography stacks that support multiple algorithms and key exchange mechanisms.
• Test thoroughly — PQC algorithms often have different performance characteristics (e.g., larger key sizes, slower signing). Extensive testing under real-world traffic patterns is essential to avoid degradation.
• Communicate transparently — Cross-team coordination is critical. Meta held regular forums to share progress, challenges, and updated timelines, ensuring alignment across engineering, security, and product teams.
• Plan for hybrid transitions — During the migration window, systems may need to support both classical and post-quantum cryptography simultaneously. Meta’s approach used hybrid handshakes to maintain backward compatibility while strengthening security.

Meta’s PQC Migration Goals

Meta has set clear objectives to guide its migration:

• Protect user data against SNDL attacks by deploying PQC across all internal services and external-facing protocols.
• Meet or exceed the timelines recommended by NIST and NCSC (e.g., 2030 for critical systems).
• Contribute to the evolution of PQC standards by sharing insights and tools with the open-source community.
• Minimize operational impact by maintaining high performance and low latency during and after the transition.

By pursuing these goals, Meta aims to uphold its security and privacy commitments today and in the quantum era.

Recommendations for Other Organizations

Based on Meta’s experience, organizations can take the following steps to prepare for a post-quantum future:

1. Conduct a cryptographic inventory — Know what you have before you plan to change it. Automated tools can help discover algorithms and keys across codebases and infrastructure.
2. Prioritize by risk — Focus on systems that process long-lived secrets (e.g., encryption keys, identity certificates) or that are exposed to SNDL collection.
3. Engage with standards bodies — Participate in NIST, NCSC, or IETF forums to stay informed and influence algorithm choices.
4. Develop a migration playbook — Document the process for each use case, including rollback procedures and contingency plans.
5. Invest in testing and monitoring — Build a sandbox environment to evaluate PQC algorithms under load, and deploy telemetry to catch regressions early.
6. Foster a security culture — Educate developers and operations teams about quantum threats and the importance of cryptographic agility.

Conclusion

The transition to post-quantum cryptography is not a distant event — it is a journey that requires careful planning, cross-functional collaboration, and a commitment to continuous improvement. Meta’s framework, lessons, and proposed migration levels offer a practical path for organizations of all sizes. By acting now, you can protect your systems against future quantum threats and ensure that today’s data remains secure tomorrow. The broader community’s collective progress will accelerate as more organizations share their experiences and best practices.