pqcstatus
Algorithm

Classic McEliece: quantum risk, deadlines and replacements

Quantum-resistant

Code-based KEM with very large public keys (not a NIST standard), recommended by BSI.

At a glance

Quantum riskQuantum-resistant
Used forKey establishment
Post-quantum algorithmYes

Positions and deadlines by authority

AuthorityPositionEffectiveScopeDetails
BSIRecommendedin forceall variantsIn hybrid combination.

Sources

  1. BSI TR-02102-1 — Cryptographic Mechanisms: Recommendations and Key Lengths (Version 2026-01) · BSI

Catalog version 2026-09-28. Every position links to its primary source; draft documents are labelled as such.

Frequently Asked Questions

Is Classic McEliece quantum-safe?

Yes. No known quantum attack breaks Classic McEliece at the recommended parameter sizes.