| Asset | Algorithm today | Use | Data shelf life | Migration target | Wave | Status |
|---|---|---|---|---|---|---|
| Edge TLS (all platforms) | ECDHE P-256 | Key exchange | Minutes | X25519 + ML-KEM-768 | 1 | In progress |
| goAML bridge signatures | ECDSA P-384 | Signing | 15 years (legal evidence) | ML-DSA-65 (hybrid first) | 1 | Pilot |
| RO mTLS CA | RSA-3072 | Signing | 5 years | ML-DSA-65 | 2 | Planned |
| Case database KEKs | AES-256 | Symmetric | 25 years | AES-256 (quantum-resistant at 256 bits) | — | PQC-ready |
| Whistleblower sealing | RSA-OAEP-3072 wrap | Key transport | Indefinite | ML-KEM-1024 | 1 | In progress |
| Backups to tape | AES-256 + RSA wrap | Key transport | 10 years | ML-KEM-768 wrap | 2 | Planned |