Does Vietnam have a post-quantum cryptography (PQC) law?

Partially. The rule is binding for a specific regulated subset, not the whole economy. The issuing body is Prime Minister's Office / Authority of Information Security (Cục An toàn thông tin), Vietnam.

What is Vietnam's PQC migration deadline?

2035. See the sources below for what this deadline actually covers, since it may apply only to specific sectors or system types. The deadline came from Prime Minister's Office / Authority of Information Security (Cục An toàn thông tin), Vietnam.

Does Vietnam require a Cryptographic Bill of Materials (CBOM)?

No. No CBOM or cryptographic inventory requirement appears in any of the primary sources listed on this page.

VNRegulated

Vietnam

Vietnam's Decision 125/QĐ-TTg (6 July 2026) sets a national 2026-2035 roadmap to build quantum-resistant cryptography and PQC/QKD capability for critical information systems, but it is framed as a strategic government plan with named standards/infrastructure objectives rather than a binding regulation, and it contains no explicit cryptographic-inventory or enforcement mechanism in the cited evidence.

Vietnam's post-quantum cryptography posture is classified as regulated, led by Prime Minister's Office / Authority of Information Security (Cục An toàn thông tin), Vietnam, with a migration target of 2035. It scores 55/100 on this tracker's rubric, a moderately binding rule, with real gaps in scope or enforcement, and that is not a measure of how secure or advanced the country actually is.

What's verified

On 6 July 2026 (06/7/2026), Vietnam's Deputy Prime Minister Phan Văn Giang signed Decision No. 125/QĐ-TTg approving the national Plan (Đề án) "Developing quantum-resistant (post-quantum) cryptography systems for the period 2026-2035." Per the official article published by the Authority of Information Security (under Ban Cơ yếu Chính phủ, Vietnam's Government Cipher Committee), the Plan is framed as a strategic step to protect national digital sovereignty and ensure safety for critical information systems, and lays out objectives including mastering core PQC and quantum-key-distribution technologies, upgrading national cryptographic infrastructure, building technical standards and legal frameworks for safe migration, and developing a "Make in Vietnam" cryptographic product ecosystem.

Score rationale

Each axis is scored 0–20 against the primary sources listed on this page. See the methodology for what each axis measures and how scores are derived.

Axis	Score	Why
Mandate strength	10/20	The source describes a Prime Minister's Decision (125/QĐ-TTg) approving a national Plan with strategic objectives ('mastering core PQC and QKD technologies,' 'upgrading national cryptographic infrastructure,' 'building technical standards and legal frameworks') but cites no penalty, sanction, or compliance-enforcement clause, so it reads as a top-level government plan rather than a binding regulation with teeth.
Deadline concreteness	20/20	The Plan's title itself states 'giai đoạn 2026-2035' (period 2026-2035), giving an explicit bounded year range directly in the source.
Scope of coverage	15/20	The evidence frames the goal as protecting 'chủ quyền số quốc gia' (national digital sovereignty) and ensuring safety for 'các hệ thống thông tin trọng yếu' (critical information systems), which is broader than government-only but not stated as economy-wide or all-sectors.
Inventory/CBOM requirement	0/20	No mention anywhere in the evidence of a cryptographic inventory, asset-mapping, or CBOM obligation; the listed objectives (standards, infrastructure, legal frameworks, product ecosystem) do not include or imply one.
Regulatory activity	10/20	The Authority of Information Security (Cục An toàn thông tin, under Ban Cơ yếu Chính phủ / the Government Cipher Committee) is the named body publishing and administering the Plan, but the source describes no enforcement mechanism such as fines, audits, or certification.
Total	55/100	A blunt sum of the five columns to its left.

FAQ: Vietnam and PQC

Does Vietnam have a post-quantum cryptography (PQC) law?: Partially. The rule is binding for a specific regulated subset, not the whole economy. The issuing body is Prime Minister's Office / Authority of Information Security (Cục An toàn thông tin), Vietnam.
What is Vietnam's PQC migration deadline?: 2035. See the sources below for what this deadline actually covers, since it may apply only to specific sectors or system types. The deadline came from Prime Minister's Office / Authority of Information Security (Cục An toàn thông tin), Vietnam.
Does Vietnam require a Cryptographic Bill of Materials (CBOM)?: No. No CBOM or cryptographic inventory requirement appears in any of the primary sources listed on this page.