Snabbt svar: Microsoft and Apple have both shipped post-quantum cryptography support in their mainstream operating systems: Apple’s iOS 26, iPadOS 26, macOS Tahoe 26, and visionOS 26 launched on September 15, 2025, with quantum-secure TLS 1.3 key exchange, and Microsoft brought ML-KEM and ML-DSA to general availability in Windows 11 and Windows Server 2025 with the November 2025 update. It matters because these are the two operating system vendors behind the vast majority of consumer and enterprise endpoints, so PQC has moved from a specialized enterprise initiative to a default capability of the platforms most organizations already run. The recommended action is to inventory which of your systems and applications now have native access to ML-KEM and ML-DSA through these platform updates, since deploying hybrid post-quantum protection may require less custom engineering than expected.
Key Takeaways
- Apple’s iOS 26, iPadOS 26, macOS Tahoe 26, and visionOS 26 launched September 15, 2025, and now automatically advertise the hybrid X25519MLKEM768 key exchange group in TLS 1.3 connections.
- Apple’s CryptoKit APIs give developers access to ML-KEM (768 and 1024), ML-DSA (65 and 87), and post-quantum HPKE using X-Wing, with keys optionally protected by the Secure Enclave.
- Microsoft’s ML-KEM and ML-DSA support reached general availability in Windows 11 and Windows Server 2025 with the November 2025 update, after starting as a Windows Insider preview in May 2025.
- Microsoft has continued expanding coverage since: TLS hybrid key exchange using ML-KEM reached Windows 11 and Windows Server 2025 in July 2026, and AD CS support for issuing ML-DSA certificates went generally available in May 2026.
- Both vendors maintain backward compatibility, falling back to classical key exchange when the other end of a connection does not yet support post-quantum algorithms.
At the forefront of the shift to quantum-safe security, Microsoft and Apple have moved postkvantkryptering (PQC) from roadmap to reality in their operating systems.
Apples kvantsäkra språng på WWDC25
During its Worldwide Developers Conference 2025 (WWDC25), Apple announced that iOS 26, iPadOS 26, macOS Tahoe 26, and visionOS 26 would introduce support for negotiating quantum-secure key exchange algorithms with TLS 1.3 servers that also support these advanced protocols. These platforms, now shipped, communicate using cryptographic methods designed to resist attacks by quantum computers.
Viktigt är att Apple säkerställer bakåtkompatibilitet: om en server ännu inte stöder kvantsäkra algoritmer kommer operativsystemet sömlöst att återgå till konventionella nyckelutbytesmetoder. Denna pragmatiska metod möjliggör en smidig övergång utan att störa befintlig anslutning.
Apple first incorporated PQC in iMessage in 2024, and this expansion to external servers significantly broadened the quantum-resilient footprint. iOS 26, iPadOS 26, macOS Tahoe 26, and visionOS 26 launched on September 15, 2025, and Apple’s own developer documentation confirms that TLS-protected connections on these platforms now automatically advertise support for the hybrid X25519MLKEM768 key exchange group.
Utöver stöd på systemnivå introducerade Apple en uppsättning kvantsäkra API:er som visades upp på WWDC25, vilket ger utvecklare möjlighet att bygga PQC-aktiverade appar. Dessa API:er stöder:
- Postkvantumhybridkryptering med offentlig nyckel (HPKE) med X-Wing
- ML-KEM nyckelinkapsling (varianterna 768 och 1024)
- ML-DSA digitala signaturer (varianterna 65 och 87)
- Hybrida signaturarbetsflöden som kombinerar klassiska och postkvantumalgoritmer
Dessa kryptografiska nycklar hanteras säkert via CryptoKit och lagras i nyckelringen, med valfritt skydd av Apples Secure Enclave för förbättrad hårdvarubaserad säkerhet.
Microsoft’s Quantum-Ready Windows Release
Microsoft has also delivered on its post-quantum commitments. What began as a Windows Insider preview in May 2025 reached general availability with the November 2025 Windows update, bringing full support for:
- ML-KEM, en viktig inkapslingsmekanism baserad på CRYSTALS-Kyber-algoritmen
- ML-DSA, ett digitalt signaturschema baserat på CRYSTALS-Dilithium
Båda algoritmerna är bland de som standardiserats av NIST för postkvantkryptografi, vilket representerar robusta försvar mot kvantaktiverade attacker.
Microsoft’s rollout has continued to build on that November 2025 milestone. TLS hybrid key exchange using ML-KEM groups reached Windows 11 (24H2, 25H2, and 26H1) and Windows Server 2025 with updates in July 2026, and Active Directory Certificate Services (AD CS) support for issuing ML-DSA certificates became generally available in May 2026, bringing post-quantum signing into enterprise PKI. Support for ML-KEM-based certificates and composite algorithms in AD CS is slated for a later phase.
Vad detta innebär för utvecklare och säkerhet
Genom att integrera PQC i vanliga operativsystem gör Apple och Microsoft det möjligt för utvecklare att anta kvantsäkra kryptografiska arbetsflöden direkt. Denna proaktiva förändring stärker inte bara appsäkerheten mot framtida kvanthot utan uppmuntrar också branschomfattande implementering av nästa generations krypteringsstandarder.
Developers can leverage the Apple APIs and Windows CNG updates to build hybrid signatures and post-quantum key exchanges directly into production applications today, accelerating readiness for when kvantdatorer bli kapabla att kompromissa med traditionella algoritmer.
Hur krypteringskonsulting kan hjälpa
På Encryption Consulting förstår vi de utmaningar som organisationer står inför i takt med att kvantberäkningsframsteg hotar konventionella krypteringsmetoder. Våra rådgivningstjänster efter kvantkryptografi (PQC) ger omfattande stöd för att hjälpa dig att bedöma ditt nuvarande kryptografiska landskap, utveckla en skräddarsydd strategi för kvantberedskap och implementera kvantresistenta lösningar smidigt och säkert.
Vårt expertteam guidar dig genom hotbedömningar kring kvantum, leverantörsutvärderingar, utveckling av koncepttest och efterlevnad av nya standarder. Vi säkerställer att din kryptografiska infrastruktur är motståndskraftig, flexibel och redo att skydda dina kritiska data och system mot kvantumhot.
Slutsats
Apple and Microsoft shipping post-quantum cryptography as a default capability of their mainstream operating systems marks a turning point: PQC is no longer something organizations have to build from scratch, since it is now embedded in the platforms most endpoints already run. Both vendors have taken a pragmatic approach, maintaining backward compatibility and continuing to expand coverage, from Apple’s CryptoKit APIs to Microsoft’s growing AD CS support for ML-DSA certificates.
The practical next step is not to wait for a mandate but to inventory which systems and applications can already take advantage of this native support, and to start testing hybrid post-quantum deployments where the platform support already exists.
Läs mer: https://developer.apple.com/documentation/cryptokit/using-the-quantum-secure-apis
Vanliga frågor om partihandel med mat och dryck
Which Apple operating systems support post-quantum cryptography, and since when?
iOS 26, iPadOS 26, macOS Tahoe 26, and visionOS 26 all launched on September 15, 2025, and support the hybrid X25519MLKEM768 key exchange group for TLS 1.3 connections. Apple first introduced post-quantum protection in iMessage in 2024, before extending it to general TLS connections with these releases.
Is Microsoft’s post-quantum support still in preview?
No. ML-KEM and ML-DSA support began as a Windows Insider preview in May 2025 but reached general availability in Windows 11 and Windows Server 2025 with the November 2025 update. Microsoft has continued expanding coverage since, including TLS hybrid key exchange in July 2026 and AD CS support for ML-DSA certificate issuance in May 2026.
What happens if a server doesn’t support post-quantum key exchange yet?
Both Apple and Microsoft platforms fall back seamlessly to conventional key exchange methods when the other end of a TLS connection does not yet support post-quantum algorithms, so existing connectivity is not disrupted during the transition.
What post-quantum algorithms are available to developers through Apple’s CryptoKit?
ML-KEM key encapsulation (768 and 1024 variants), ML-DSA digital signatures (65 and 87 variants), post-quantum Hybrid Public Key Encryption using X-Wing, and hybrid signature workflows combining classical and post-quantum algorithms. Keys are managed via CryptoKit and stored in the Keychain, with optional Secure Enclave protection.
Does Windows support post-quantum certificates yet?
Partially. Active Directory Certificate Services (AD CS) support for issuing ML-DSA certificates became generally available in May 2026, bringing post-quantum signing into enterprise PKI. Support for ML-KEM-based certificates and composite algorithms in AD CS is planned for a later phase.
Why does mainstream OS support for PQC matter for enterprises?
Because Apple and Microsoft operating systems run on the vast majority of consumer and enterprise endpoints, native platform support means organizations may not need custom engineering to access ML-KEM and ML-DSA. It shifts PQC from a specialized initiative to a default capability many systems already have, though enabling and testing it in production environments still requires deliberate planning.
