QuantumReadyGo to the source
We link out rather than reproduce. These are the documents that actually govern this work, plus the standards underneath them.
Singapore guidance
CSA Quantum-Safe Migration Handbook (V1, July 2026)
Practical guidance across five areas, including the CII requirements and the no-regret moves for each area. Jointly developed by CSA, GovTech and IMDA.
Quantum Readiness Index (QRI)
The official self-assessment instrument, delivered as a government form. Five domains, each objective scored across four levels. Complete it directly; we do not administer it and we do not reproduce it.
MAS circular MAS/TCRS/2024/01
Advisory on Addressing the Cybersecurity Risks Associated with Quantum, issued 20 February 2024 to the chief executives of all financial institutions. The three areas it asks financial institutions to work through are awareness, cryptographic inventory, and capability.
CSA news and events
Press releases and announcements, including the original release of the Handbook and QRI.
Standards and technical references
FIPS 203, ML-KEM
Module-lattice-based key encapsulation, derived from CRYSTALS-Kyber. The key-establishment half of most migration plans.
FIPS 204, ML-DSA
Module-lattice-based digital signature, derived from CRYSTALS-Dilithium.
FIPS 205, SLH-DSA
Stateless hash-based digital signature, derived from SPHINCS+. A different mathematical foundation, at the cost of larger signatures.
RFC 8446, TLS 1.3
The protocol version that makes hybrid key exchange possible, and the reason a host refusing TLS 1.3 cannot offer post-quantum key exchange at all.
How we relate to these documents
We are independent and not affiliated with, endorsed by, or acting for CSA, GovTech, IMDA or MAS. We do not reproduce the Handbook or the QRI, and we do not administer the official assessment. Our reports reference the published requirements and link back to the sources so you can check anything we say.
Our own explainers, as downloads
Written for someone who needs to understand the field, or to explain it to a customer, without a cryptography background. Both are ours, free to share, and updated as the standards move.