| Vendor / product | Category | Post-quantum support | Status |
|---|---|---|---|
| Google Chrome | Browser | Hybrid X25519MLKEM768 key exchange on by default (Chrome 131, Nov 2024), following an earlier Kyber-based hybrid in Chrome 124. | Shipping |
| Apple iOS / macOS 26 | Operating system | Hybrid ML-KEM key exchange for TLS in system networking APIs; iMessage PQ3 protocol since iOS 17.4. | Shipping |
| Cloudflare | CDN / edge | Hybrid post-quantum key agreement enabled by default for supporting browsers since 2023. | Shipping |
| OpenSSL 3.5 | Library | ML-KEM, ML-DSA and SLH-DSA, with hybrid ML-KEM in the default TLS key-exchange groups (April 2025). | Shipping |
| OpenSSH 10.0 | Protocol | mlkem768x25519-sha256 is the default key exchange (April 2025); a hybrid NTRU Prime scheme was default from 9.0. | Shipping |
| Go 1.24 | Language | crypto/mlkem package; X25519MLKEM768 enabled by default in crypto/tls (February 2025). | Shipping |
| Java (JDK 24) | Language | ML-KEM (JEP 496) and ML-DSA (JEP 497) added to the platform (March 2025). | Shipping |
| Signal | Messaging | PQXDH added post-quantum protection to its key agreement in 2023. | Shipping |
| AWS KMS | Cloud | ML-DSA signing keys available in Key Management Service (2025). | Partial |
| Microsoft Windows | Operating system | ML-KEM and ML-DSA added to SymCrypt and Windows cryptography APIs, rolled out through 2025. | Partial |
“Shipping” means enabled by default in a generally available release. “Partial” means available for some services or behind configuration. Always confirm against the vendor’s own documentation for your version. Spotted something out of date? Tell us.