Malaysia Accelerates Quantum-Resistant Security Rollout

The collaboration would bring together the National Security Council, the NACSA, and the country’s telecom companies. The aim is faster, more secure adoption of quantum-resistant encryption and quantum-safe communications, supported by a dedicated R&D space for the transition.

Fahmi made the announcement after touring exhibition booths at Mobile World Congress Doha 2026, where he singled out quantum-safe communication as a key tool for protecting sensitive information. He framed migration as a near-term priority rather than a distant problem. I foresee that quantum migration and quantum-safe communication will be among the key issues facing many countries in the years ahead, he said. He also warned that commercially available quantum computers capable of challenging current encryption could expose weaknesses in existing cybersecurity infrastructure.

A Head Start, and a Deadline Not Far Behind

Malaysia is not starting from zero. It is the only Asean country to reach Tier 1 in the Asean Post-Quantum Cryptography Readiness 2026 assessment. The groundwork includes:

• The NACSA’s MyKriptografi Action Plan 2026 to 2030, which turns the National Cryptography Policy into coordinated programmes for strengthening the country’s cryptography ecosystem
• The National Post-Quantum Cryptography Migration Plan
• The Malaysia Quantum Cryptography Sandbox, where organizations can test quantum-resistant solutions in a controlled environment before full deployment

The new R&D initiative would sit on top of that framework as the next layer of execution.

The outside clock is already running. Under NIST guidelines, quantum-vulnerable public-key algorithms will be discouraged after 2030 and no longer permitted after 2035. In the United States, Executive Order 14412 pushes federal high-value assets and high-impact systems to migrate by 2030 for key establishment and by 2031 for digital signatures. NIST advises organizations to start with cryptographic inventories, migration plans, and early deployment of products that support post-quantum algorithms.

Telecom operators face the sharpest pressure because the encrypted traffic of banks, government agencies, and healthcare providers runs over their networks. From now through 2030, teams are expected to begin phasing out existing encryption methods while testing quantum-resistant replacements, and hybrid setups that combine old and new algorithms will likely carry the middle years.

Hashlytics Take

Malaysia’s Tier 1 ranking and its sandbox show the policy work is ahead of most of the region, but this announcement is still an instruction to hold discussions, not a deployment. The hard part comes next. Telecom vendors have to ship hybrid cryptography that works on live networks, and the MCMC has to keep that coordination moving faster than the standards deadlines tighten. Countries that treat 2030 as a planning date instead of a migration date will find the inventory step alone takes longer than expected. Malaysia has earned the right to be watched as the regional test case, and the sandbox results will say more than any announcement.