Respuesta rápida: Microsoft and Apple have both shipped post-quantum cryptography support in their mainstream operating systems: Apple’s iOS 26, iPadOS 26, macOS Tahoe 26, and visionOS 26 launched on September 15, 2025, with quantum-secure TLS 1.3 key exchange, and Microsoft brought ML-KEM and ML-DSA to general availability in Windows 11 and Windows Server 2025 with the November 2025 update. It matters because these are the two operating system vendors behind the vast majority of consumer and enterprise endpoints, so PQC has moved from a specialized enterprise initiative to a default capability of the platforms most organizations already run. The recommended action is to inventory which of your systems and applications now have native access to ML-KEM and ML-DSA through these platform updates, since deploying hybrid post-quantum protection may require less custom engineering than expected.
Puntos Clave
- Apple’s iOS 26, iPadOS 26, macOS Tahoe 26, and visionOS 26 launched September 15, 2025, and now automatically advertise the hybrid X25519MLKEM768 key exchange group in TLS 1.3 connections.
- Apple’s CryptoKit APIs give developers access to ML-KEM (768 and 1024), ML-DSA (65 and 87), and post-quantum HPKE using X-Wing, with keys optionally protected by the Secure Enclave.
- Microsoft’s ML-KEM and ML-DSA support reached general availability in Windows 11 and Windows Server 2025 with the November 2025 update, after starting as a Windows Insider preview in May 2025.
- Microsoft has continued expanding coverage since: TLS hybrid key exchange using ML-KEM reached Windows 11 and Windows Server 2025 in July 2026, and AD CS support for issuing ML-DSA certificates went generally available in May 2026.
- Both vendors maintain backward compatibility, falling back to classical key exchange when the other end of a connection does not yet support post-quantum algorithms.
At the forefront of the shift to quantum-safe security, Microsoft and Apple have moved criptografía poscuántica (PQC) from roadmap to reality in their operating systems.
El salto cuántico-seguro de Apple en la WWDC25
During its Worldwide Developers Conference 2025 (WWDC25), Apple announced that iOS 26, iPadOS 26, macOS Tahoe 26, and visionOS 26 would introduce support for negotiating quantum-secure key exchange algorithms with TLS 1.3 servers that also support these advanced protocols. These platforms, now shipped, communicate using cryptographic methods designed to resist attacks by quantum computers.
Es importante destacar que Apple garantiza la retrocompatibilidad: si un servidor aún no es compatible con algoritmos de seguridad cuántica, el sistema operativo recurrirá sin problemas a los métodos convencionales de intercambio de claves. Este enfoque pragmático permite una transición fluida sin interrumpir la conectividad existente.
Apple first incorporated PQC in iMessage in 2024, and this expansion to external servers significantly broadened the quantum-resilient footprint. iOS 26, iPadOS 26, macOS Tahoe 26, and visionOS 26 launched on September 15, 2025, and Apple’s own developer documentation confirms that TLS-protected connections on these platforms now automatically advertise support for the hybrid X25519MLKEM768 key exchange group.
Además del soporte a nivel de sistema, Apple presentó un conjunto de API de seguridad cuántica en la WWDC25, que permiten a los desarrolladores crear aplicaciones compatibles con PQC. Estas API son compatibles con:
- Cifrado de clave pública híbrido postcuántico (HPKE) con X-Wing
- ML-KEM encapsulación de claves (variantes 768 y 1024)
- ML-DSA firmas digitales (variantes 65 y 87)
- Flujos de trabajo de firma híbridos que combinan algoritmos clásicos y poscuánticos
Estas claves criptográficas se administran de forma segura a través de CryptoKit y se almacenan en el llavero, con protección opcional mediante Secure Enclave de Apple para una seguridad mejorada respaldada por hardware.
Microsoft’s Quantum-Ready Windows Release
Microsoft has also delivered on its post-quantum commitments. What began as a Windows Insider preview in May 2025 reached general availability with the November 2025 Windows update, bringing full support for:
- ML-KEM, un mecanismo de encapsulación de claves basado en el algoritmo CRYSTALS-Kyber
- ML-DSA, un esquema de firma digital basado en CRYSTALS-Dilithium
Ambos algoritmos se encuentran entre los estandarizados por el NIST para la criptografía postcuántica, lo que representa una sólida defensa contra los ataques basados en la computación cuántica.
Microsoft’s rollout has continued to build on that November 2025 milestone. TLS hybrid key exchange using ML-KEM groups reached Windows 11 (24H2, 25H2, and 26H1) and Windows Server 2025 with updates in July 2026, and Active Directory Certificate Services (AD CS) support for issuing ML-DSA certificates became generally available in May 2026, bringing post-quantum signing into enterprise PKI. Support for ML-KEM-based certificates and composite algorithms in AD CS is slated for a later phase.
Qué significa esto para los desarrolladores y la seguridad
Al integrar PQC en los sistemas operativos más utilizados, Apple y Microsoft permiten a los desarrolladores adoptar flujos de trabajo criptográficos seguros frente a la computación cuántica de forma nativa. Este cambio proactivo no solo refuerza la seguridad de las aplicaciones frente a futuras amenazas cuánticas , sino que también fomenta la adopción generalizada de los estándares de cifrado de próxima generación en toda la industria.
Developers can leverage the Apple APIs and Windows CNG updates to build hybrid signatures and post-quantum key exchanges directly into production applications today, accelerating readiness for when computadoras cuánticas ser capaces de comprometer los algoritmos tradicionales.
Cómo puede ayudar la consultoría de cifrado
En Encryption Consulting, reconocemos los desafíos que enfrentan las organizaciones a medida que los avances en computación cuántica amenazan los métodos de cifrado convencionales. Nuestros servicios de asesoramiento en criptografía postcuántica (PQC) brindan soporte integral para ayudarle a evaluar su entorno criptográfico actual, desarrollar una estrategia personalizada de preparación cuántica e implementar soluciones resistentes a la computación cuántica de manera fluida y segura.
Nuestro equipo de expertos le guía en la evaluación de amenazas cuánticas, la evaluación de proveedores, el desarrollo de pruebas de concepto y el cumplimiento de los estándares emergentes. Garantizamos que su infraestructura criptográfica sea resiliente, ágil y esté preparada para proteger sus datos y sistemas críticos contra las amenazas cuánticas.
Conclusión
Apple and Microsoft shipping post-quantum cryptography as a default capability of their mainstream operating systems marks a turning point: PQC is no longer something organizations have to build from scratch, since it is now embedded in the platforms most endpoints already run. Both vendors have taken a pragmatic approach, maintaining backward compatibility and continuing to expand coverage, from Apple’s CryptoKit APIs to Microsoft’s growing AD CS support for ML-DSA certificates.
The practical next step is not to wait for a mandate but to inventory which systems and applications can already take advantage of this native support, and to start testing hybrid post-quantum deployments where the platform support already exists.
Leer más: https://developer.apple.com/documentation/cryptokit/using-the-quantum-secure-apis
Preguntas frecuentes
Which Apple operating systems support post-quantum cryptography, and since when?
iOS 26, iPadOS 26, macOS Tahoe 26, and visionOS 26 all launched on September 15, 2025, and support the hybrid X25519MLKEM768 key exchange group for TLS 1.3 connections. Apple first introduced post-quantum protection in iMessage in 2024, before extending it to general TLS connections with these releases.
Is Microsoft’s post-quantum support still in preview?
No. ML-KEM and ML-DSA support began as a Windows Insider preview in May 2025 but reached general availability in Windows 11 and Windows Server 2025 with the November 2025 update. Microsoft has continued expanding coverage since, including TLS hybrid key exchange in July 2026 and AD CS support for ML-DSA certificate issuance in May 2026.
What happens if a server doesn’t support post-quantum key exchange yet?
Both Apple and Microsoft platforms fall back seamlessly to conventional key exchange methods when the other end of a TLS connection does not yet support post-quantum algorithms, so existing connectivity is not disrupted during the transition.
What post-quantum algorithms are available to developers through Apple’s CryptoKit?
ML-KEM key encapsulation (768 and 1024 variants), ML-DSA digital signatures (65 and 87 variants), post-quantum Hybrid Public Key Encryption using X-Wing, and hybrid signature workflows combining classical and post-quantum algorithms. Keys are managed via CryptoKit and stored in the Keychain, with optional Secure Enclave protection.
Does Windows support post-quantum certificates yet?
Partially. Active Directory Certificate Services (AD CS) support for issuing ML-DSA certificates became generally available in May 2026, bringing post-quantum signing into enterprise PKI. Support for ML-KEM-based certificates and composite algorithms in AD CS is planned for a later phase.
Why does mainstream OS support for PQC matter for enterprises?
Because Apple and Microsoft operating systems run on the vast majority of consumer and enterprise endpoints, native platform support means organizations may not need custom engineering to access ML-KEM and ML-DSA. It shifts PQC from a specialized initiative to a default capability many systems already have, though enabling and testing it in production environments still requires deliberate planning.
