Netherlands PQC Migration Handbook (AIVD, CWI, TNO, 2nd Edition 2024)

The Dutch PQC Migration Handbook (AIVD, CWI and TNO, second edition, December 2024): guidance for moving to post-quantum cryptography in three steps. Diagnosis (PQC personas, cryptographic policy, discovery strategy, inventories of cryptographic assets in CBOM form, data and suppliers, and a scored quantum risk assessment), planning (migration manager and budget, cost estimate, maturity model, dependency-ordered technical plan with protection during change) and execution (hybrid combinations and downgrade protection, pre-shared keys under six conditions, recommended algorithms such as ML-KEM-1024 and ML-DSA-87 with classical partners, protocol-by-protocol migration, cryptographic agility, evaluated implementations and priority for PQC over QKD), plus the no-regret moves. 25 recommendation leaves, paraphrased. It comprises 25 controls organised across 4 domains, and applies in the Netherlands.