build2 publishersConfirmed OpenSSH 10.6, released October 6, turns off the LZ77 coder in SSH compression to block an attack that reads one channel's secrets from another. Hosts using the Compression option will get less from it, so the project suggests compressing in the application.
Reality
- Evidence72
- Adoption
- Insufficient
- Hype gap0
- Incentives25
- Confidence75
build1 publisherOne report Cloudflare Workers adds five ML-KEM and ML-DSA parameter sets to Web Crypto behind the webcrypto_modern_algorithms flag. Developers can now test post-quantum code against primitives built into the runtime, but they still have to build the protocols on top.
Reality
- Evidence60
- Adoption
- Insufficient
- Hype gap0
- Incentives55
- Confidence62
Hybrid ML-KEM is live on google.com and googleapis.com, and Cloud KMS post-quantum algorithms are generally available. The rest of the roadmap is a dated dependency schedule.
Reality
- Evidence60
- Adoption40
- Hype gap+10
- Incentives55
- Confidence65
build5 publishersConfirmed Generic methods collapse per-type API sprawl, go fix gains four modernizers, and the goroutineleak profile in runtime/pprof is now generally available. GoLand 2026.2 supports all three.
Perspective Coverage
5 publishers
- Builder
- Builder 66%
- Operator
- Operator 34%
- Investor
- Investor 0%
Reality
- Evidence72
- Adoption
- Insufficient
- Hype gap+8
- Incentives45
- Confidence70
build1 publisherOne report AWS and Microsoft are already shipping ML-KEM hybrid groups, so the question for platform teams is whether the old proxy, SDK and appliance in the path still complete a handshake that got bigger.
Reality
- Evidence40
- Adoption55
- Hype gap+10
- Incentives20
- Confidence45
build1 publisherOne report Reference mode on the iPhone 18 Pro signs pixels as they leave the sensor and finishes the picture inside Private Cloud Compute, so anyone building a verification pipeline now has an Apple trust root to handle alongside C2PA.
Reality
- Evidence56
- Adoption24
- Hype gap+28
- Incentives72
- Confidence57
build1 publisherOne report Probing each origin for its preferred key agreement group dropped HelloRetryRequests on scanned origins from about 52% to 3.7% and took more than 150 ms off p90 handshakes, after the price of the old classical-first default had climbed 25-fold since 2023.
Reality
- Evidence62
- Adoption68
- Hype gap+5
- Incentives72
- Confidence63
Post-quantum standards were finalised in August 2024, and NIST means to phase out most quantum-vulnerable algorithms by 2035. For banks the harder problem is finding every place RSA and ECC are written into application code.
Reality
- Evidence46
- Adoption32
- Hype gap+24
- Incentives64
- Confidence50
Three regulators have now dated the migration away from today's encryption, and the nearest date belongs to FINMA, which wants supervised institutions to get a post-quantum strategy through the board by mid-2027.
Reality
- Evidence42
- Adoption20
- Hype gap+32
- Incentives45
- Confidence45
build1 publisherOne report The 26-day figure is a runtime rather than a date, and it works out to one logical Toffoli every 57.6 milliseconds on trapped-ion hardware whose scale IonQ's roadmap does not reach until 2028. No error rates are published to check it.
Reality
- Evidence30
- Adoption
- Insufficient
- Hype gap+40
- Incentives80
- Confidence40
The G7's report carries no binding force and never says the word crypto, arriving four months before the EU wants member states moving, and it pushes quantum readiness into government procurement, which is how the cost eventually reaches private custodians.
Reality
- Evidence52
- Adoption28
- Hype gap+14
- Incentives45
- Confidence58
build1 publisherOne report InfoQ's Spring Boot walkthrough puts ML-KEM and ML-DSA behind the standard JCE on JDK 24. That retires the library argument and leaves the migration gated on where a private key lives and how long your service tokens do.
Reality
- Evidence44
- Adoption22
- Hype gap+24
- Incentives32
- Confidence41
Blockstream's SHRINCS is the first post-quantum signature scheme written to Bitcoin's block economics, and Jonas Nick says up front it is not optimal. The argument now is about price.
Reality
- Evidence55
- Adoption22
- Hype gap+12
- Incentives68
- Confidence48
A Forbes Tech Council argument for urgency leans on benchmarks that were never factoring runs. The part of it that survives scrutiny is still enough to justify the spend.
Reality
- Evidence38
- Adoption36
- Hype gap+42
- Incentives78
- Confidence48