Microsoft and Apple Advance Post-Quantum Cryptography Support in Upcoming OS Releases
Quick answer: Microsoft and Apple have both shipped post-quantum cryptography support in their mainstream operating systems: Apple’s iOS 26, iPadOS 26, macOS Tahoe 26, and visionOS 26 launched on September 15, 2025, with quantum-secure TLS 1.3 key exchange, and Microsoft brought ML-KEM and ML-DSA to general availability in Windows 11 and Windows Server 2025 with the November 2025 update. It matters because these are the two operating system vendors behind the vast majority of consumer and enterprise endpoints, so PQC has moved from a specialized enterprise initiative to a default capability of the platforms most organizations already run. The recommended action is to inventory which of your systems and applications now have native access to ML-KEM and ML-DSA through these platform updates, since deploying hybrid post-quantum protection may require less custom engineering than expected.
Key Takeaways
- Apple’s iOS 26, iPadOS 26, macOS Tahoe 26, and visionOS 26 launched September 15, 2025, and now automatically advertise the hybrid X25519MLKEM768 key exchange group in TLS 1.3 connections.
- Apple’s CryptoKit APIs give developers access to ML-KEM (768 and 1024), ML-DSA (65 and 87), and post-quantum HPKE using X-Wing, with keys optionally protected by the Secure Enclave.
- Microsoft’s ML-KEM and ML-DSA support reached general availability in Windows 11 and Windows Server 2025 with the November 2025 update, after starting as a Windows Insider preview in May 2025.
- Microsoft has continued expanding coverage since: TLS hybrid key exchange using ML-KEM reached Windows 11 and Windows Server 2025 in July 2026, and AD CS support for issuing ML-DSA certificates went generally available in May 2026.
- Both vendors maintain backward compatibility, falling back to classical key exchange when the other end of a connection does not yet support post-quantum algorithms.
At the forefront of the shift to quantum-safe security, Microsoft and Apple have moved post-quantum cryptography (PQC) from roadmap to reality in their operating systems.
Apple’s Quantum-Secure Leap at WWDC25
During its Worldwide Developers Conference 2025 (WWDC25), Apple announced that iOS 26, iPadOS 26, macOS Tahoe 26, and visionOS 26 would introduce support for negotiating quantum-secure key exchange algorithms with TLS 1.3 servers that also support these advanced protocols. These platforms, now shipped, communicate using cryptographic methods designed to resist attacks by quantum computers.
Importantly, Apple ensures backward compatibility: if a server does not support quantum-safe algorithms yet, the OS will seamlessly fall back to conventional key exchange methods. This pragmatic approach allows for a smooth transition without disrupting existing connectivity.
Apple first incorporated PQC in iMessage in 2024, and this expansion to external servers significantly broadened the quantum-resilient footprint. iOS 26, iPadOS 26, macOS Tahoe 26, and visionOS 26 launched on September 15, 2025, and Apple’s own developer documentation confirms that TLS-protected connections on these platforms now automatically advertise support for the hybrid X25519MLKEM768 key exchange group.
In addition to system-level support, Apple introduced a set of quantum-secure APIs showcased at WWDC25, empowering developers to build PQC-enabled apps. These APIs support:
- Post-quantum Hybrid Public Key Encryption (HPKE) using X-Wing
- ML-KEM key encapsulation (768 and 1024 variants)
- ML-DSA digital signatures (variants 65 and 87)
- Hybrid signature workflows combining classical and post-quantum algorithms
These cryptographic keys are securely managed via CryptoKit and stored in the Keychain, with optional protection by Apple’s Secure Enclave for enhanced hardware-backed security.
Microsoft’s Quantum-Ready Windows Release
Microsoft has also delivered on its post-quantum commitments. What began as a Windows Insider preview in May 2025 reached general availability with the November 2025 Windows update, bringing full support for:
- ML-KEM, a key encapsulation mechanism based on the CRYSTALS-Kyber algorithm
- ML-DSA, a digital signature scheme based on CRYSTALS-Dilithium
Both algorithms are among those standardized by NIST for post-quantum cryptography, representing robust defenses against quantum-enabled attacks.
Microsoft’s rollout has continued to build on that November 2025 milestone. TLS hybrid key exchange using ML-KEM groups reached Windows 11 (24H2, 25H2, and 26H1) and Windows Server 2025 with updates in July 2026, and Active Directory Certificate Services (AD CS) support for issuing ML-DSA certificates became generally available in May 2026, bringing post-quantum signing into enterprise PKI. Support for ML-KEM-based certificates and composite algorithms in AD CS is slated for a later phase.
What This Means for Developers and Security
By integrating PQC into mainstream operating systems, Apple and Microsoft are enabling developers to adopt quantum-safe cryptographic workflows natively. This proactive shift not only strengthens app security against future quantum threats but also encourages industry-wide adoption of next-generation encryption standards.
Developers can leverage the Apple APIs and Windows CNG updates to build hybrid signatures and post-quantum key exchanges directly into production applications today, accelerating readiness for when quantum computers become capable of compromising traditional algorithms.
How Encryption Consulting Can Help
At Encryption Consulting, we recognize the challenges organizations face as quantum computing advances threaten conventional encryption methods. Our Post-Quantum Cryptography (PQC) Advisory Services provide comprehensive support to help you assess your current cryptographic landscape, develop a tailored quantum readiness strategy, and implement quantum-resistant solutions smoothly and securely.
Our expert team guides you through quantum threat assessments, vendor evaluations, proof-of-concept development, and compliance with emerging standards. We ensure your cryptographic infrastructure is resilient, agile, and ready to protect your critical data and systems against quantum threats.
Conclusion
Apple and Microsoft shipping post-quantum cryptography as a default capability of their mainstream operating systems marks a turning point: PQC is no longer something organizations have to build from scratch, since it is now embedded in the platforms most endpoints already run. Both vendors have taken a pragmatic approach, maintaining backward compatibility and continuing to expand coverage, from Apple’s CryptoKit APIs to Microsoft’s growing AD CS support for ML-DSA certificates.
The practical next step is not to wait for a mandate but to inventory which systems and applications can already take advantage of this native support, and to start testing hybrid post-quantum deployments where the platform support already exists.
Read More: https://developer.apple.com/documentation/cryptokit/using-the-quantum-secure-apis
Frequently Asked Questions
iOS 26, iPadOS 26, macOS Tahoe 26, and visionOS 26 all launched on September 15, 2025, and support the hybrid X25519MLKEM768 key exchange group for TLS 1.3 connections. Apple first introduced post-quantum protection in iMessage in 2024, before extending it to general TLS connections with these releases.
No. ML-KEM and ML-DSA support began as a Windows Insider preview in May 2025 but reached general availability in Windows 11 and Windows Server 2025 with the November 2025 update. Microsoft has continued expanding coverage since, including TLS hybrid key exchange in July 2026 and AD CS support for ML-DSA certificate issuance in May 2026.
Both Apple and Microsoft platforms fall back seamlessly to conventional key exchange methods when the other end of a TLS connection does not yet support post-quantum algorithms, so existing connectivity is not disrupted during the transition.
ML-KEM key encapsulation (768 and 1024 variants), ML-DSA digital signatures (65 and 87 variants), post-quantum Hybrid Public Key Encryption using X-Wing, and hybrid signature workflows combining classical and post-quantum algorithms. Keys are managed via CryptoKit and stored in the Keychain, with optional Secure Enclave protection.
Partially. Active Directory Certificate Services (AD CS) support for issuing ML-DSA certificates became generally available in May 2026, bringing post-quantum signing into enterprise PKI. Support for ML-KEM-based certificates and composite algorithms in AD CS is planned for a later phase.
Because Apple and Microsoft operating systems run on the vast majority of consumer and enterprise endpoints, native platform support means organizations may not need custom engineering to access ML-KEM and ML-DSA. It shifts PQC from a specialized initiative to a default capability many systems already have, though enabling and testing it in production environments still requires deliberate planning.
Every Layer of Cryptography.
One Team to Secure It.
See how Encryption Consulting secures what your enterprise depends on, from assessment through deployment.
Request a Demo
