Japan Is Betting on NIST's Algorithms, Not Its Own -- the Opposite Bet China and Russia Are Making
CRYPTREC is evaluating ML-KEM, ML-DSA, and SLH-DSA for Japan's recommended cipher list, continuing its decades-long pattern of adopting internationally vetted algorithms rather than building a sovereign alternative.
Two of the countries on this tracker with the longest-running institutional cryptography bodies are making opposite bets. China and Russia are each building sovereign post-quantum algorithm tracks, separate from NIST's selections. Japan's CRYPTREC is doing the thing most people assume every country will eventually do: evaluate NIST's finalized algorithms and adopt them.
A long history of following, not diverging
CRYPTREC (Cryptography Research and Evaluation Committees) maintains Japan's official list of recommended cryptographic algorithms -- the CRYPTREC Ciphers List -- for government and critical systems. Its institutional pattern, going back well before the current PQC transition, has been to track international cryptographic standardization closely and sometimes contribute to it directly, rather than building a parallel domestic standard the way China's SM-series or Russia's GOST series do for classical cryptography.
That pattern is continuing into the post-quantum era. CRYPTREC is currently in an active evaluation phase for NIST's finalized ML-KEM (key encapsulation), ML-DSA (digital signatures), and SLH-DSA (hash-based signatures), working toward adding them to its own recommended list rather than running a separate national algorithm-selection process of its own.
Why the choice of strategy matters beyond Japan
This is a genuinely useful contrast point for understanding the broader PQC landscape. China's ICCS is running a formal, NIST-style competition with its own submission deadlines, explicitly framed as cryptographic self-reliance. Russia's TC 26 has maintained a dedicated post-quantum working group since 2019, extending the GOST sovereignty model. Japan's CRYPTREC represents the third major pattern: align directly with the internationally-vetted algorithms rather than building an alternative.
For multinational organizations, that choice has real operational consequences. A company already implementing NIST-aligned PQC migration for US or EU operations should expect minimal additional algorithm-specific work for Japan, because CRYPTREC's eventual requirements are very likely to point at the same ML-KEM/ML-DSA/SLH-DSA algorithms already being deployed elsewhere. The same company operating in China or Russia should expect to eventually need a separate, sovereign-aligned cryptographic profile for those markets -- a meaningfully different compliance posture entirely driven by which institutional strategy each country chose.
What hasn't happened yet
No binding PQC migration mandate exists in Japan as of the latest published CRYPTREC guidance. CRYPTREC's evaluation is active but not concluded -- the algorithms aren't on the recommended list yet, just under review for addition. NISC (National center of Incident readiness and Strategy for Cybersecurity), which coordinates Japan's broader national cybersecurity strategy, treats quantum-readiness as an emerging theme within that strategy, not yet codified into a specific requirement. No enforcement mechanism with penalties exists for PQC migration specifically -- CRYPTREC's list carries real practical authority through government procurement requirements, but that's influence through purchasing power, not a legal mandate with consequences attached.
What to do with this
If you operate in Japan, the single most useful thing to monitor is CRYPTREC's ciphers list directly -- the addition of ML-KEM, ML-DSA, and/or SLH-DSA entries will be the clearest, most concrete signal that Japan's position is hardening from monitoring toward an actual requirement. Organizations already executing NIST-aligned PQC migration elsewhere are well-positioned for Japan specifically: expect the eventual Japanese requirement to track the same algorithms, with the remaining work being process and documentation aligned to CRYPTREC's eventual specifics, not new algorithm work. Government contractors and critical infrastructure operators should expect to be first in scope once CRYPTREC's list updates, consistent with how the list has functioned for classical cryptography.
The Japan country page tracks CRYPTREC's evaluation status and NISC's broader strategy against their primary sources.
Frequently asked questions
- Has Japan set a post-quantum cryptography migration deadline?
- No. As of the latest published CRYPTREC guidance, Japan has not issued a binding PQC migration mandate. CRYPTREC is in an active evaluation phase for NIST's finalized algorithms, with no deadline attached yet.
- What is CRYPTREC?
- Cryptography Research and Evaluation Committees -- the body that maintains Japan's official list of recommended cryptographic algorithms (the CRYPTREC Ciphers List) for government and critical systems. It has a long track record of closely tracking, and sometimes contributing to, international cryptographic standardization, including NIST's PQC process.
- Is Japan developing its own sovereign post-quantum algorithms, like China or Russia?
- No. CRYPTREC's approach is to evaluate and adopt internationally vetted algorithms into its own recommended list rather than developing a fully separate domestic standard. This is the opposite institutional strategy from China's ICCS algorithm competition or Russia's GOST-track working group, both of which are building sovereign alternatives to NIST's selections.
- Which algorithms is CRYPTREC currently evaluating?
- NIST's finalized ML-KEM, ML-DSA, and SLH-DSA, for potential inclusion in the CRYPTREC Ciphers List.
- Who does CRYPTREC's list apply to in Japan?
- Government systems and agencies are expected to follow the recommended list once PQC entries are finalized. Critical infrastructure operators fall under general NISC cybersecurity strategy guidance, without PQC-specific binding timelines yet. Private-sector organizations typically follow CRYPTREC recommendations as a de facto standard, even without legal compulsion, because of the list's role in government procurement.
- What should organizations watch for to know when Japan's position changes?
- CRYPTREC's ciphers list directly -- the clearest signal of Japan's position hardening from 'monitoring' to 'guidance' or 'mandated' will be the actual addition of ML-KEM, ML-DSA, and/or SLH-DSA entries to the published list.