National post-quantum readiness and sovereignty

This explorer presents the country assessments of the Readiness–Sovereignty Capability Model (RSCM). The model scores post-quantum migration readiness and decomposes cryptographic sovereignty into three constructs, indigenous cryptographic capacity (general capacity, including classical cryptography), indigenous post-quantum control (the quantum-safe layer only), and external dependency, so that general cryptographic strength is not read as control of the post-quantum layer. A country is classified as a post-quantum maker only when public evidence shows that it designs, implements, or validates post-quantum cryptography on a sustained institutional basis.

Reading the scores. Every cell is an ordinal level (0–4) coded from cited public evidence and graded H / M / L for evidence strength. The class follows the maker gate, which requires level 3 on at least one creation layer (primitive design, implementation, or validation) on a sustained institutional basis; classical capability and governance authority do not qualify on their own. Retention is the share of a 4000-draw bootstrap over the plausible states of each cell, given its evidence grade, in which the country keeps its maker verdict. The sample is purposive, covering documented cryptographic actors, and is not a global census. The model is described in the companion paper.

Live world view

The assessed countries on a map, colored by the selected layer. Makers are marked with expanding rings whose rate follows the creation scorei. Countries whose deployed post-quantum layer is foreign-supplied (external dependency 3 or 4) are joined by a line to NIST, which standardized the ML-KEM, ML-DSA, and SLH-DSA schemes that those stacks adopt. The panel below the map cycles through the countries; hover over a country for its scores and click it for the evidence.

The capacity–creation plane

Each country is placed by general cryptographic capacity (horizontal)i against indigenous post-quantum creation (vertical)i. The two axes are kept separate, so a country with high general capacity can still sit near zero on creation. Countries in the shaded band clear the maker gatei. Click a point for the evidence behind its scores.

All countries

Readiness R, indigenous cryptographic capacity ICC, indigenous post-quantum creation Cr, external dependency ED, class, and the share of bootstrap draws that keep the maker verdict. A dagger marks a boundary case. Columns can be sorted; click a row for the country record.

Extend the dataset locally

Download the current dataset, edit or add countries with their coded levels and sources, and upload the file. The page recomputes each entry under the same rules (Cr, the maker gate, class, type, and the retention bootstrap), updates an existing country or adds a new one, and stores the changes in this browser only. Nothing is sent to a server. Uploaded entries are marked local.

Upload updates (JSON) Generated

Format guide (what each field means)

Upload a JSON file shaped like the template: a top-level countries array, one object per country. You supply the coded levels (integers 0–4) and the sources; the page computes R, ICC, Cr, ED, class, type, boundary, and retention, which are not supplied by the user.

Field	Type	Meaning
`country`	text, required	Country name. Matching an existing name updates it; a new name adds it.
`region`	text	Continent for the filter (Africa, Asia, Europe, North America, South America, Oceania).
`isolated`	true / false	Set true only for a lone non-institutional academic result; it then cannot clear the maker gate.
`R_dims`	array of 5	Readiness dimensions, each `{name, level 0–4}`: strategy, inventory, standards, deployment, workforce.
`A_dims`	array of 5	Capacity layers, each `{name, level 0–4}`: authorship, vendor/supply, infrastructure, governance, research/talent.
`B_dims`	array of 5	Post-quantum control cells B1–B5, each `{key, name, level 0–4, ev, why, cite}`. B1–B3 (design, implementation, validation) decide the maker gate.
`ED_detail`	object	External dependency, `{level 0–4, ev, why, cite}`; 0 self-sufficient, 4 fully foreign.
`ev`	text	Evidence grade for that cell: `High`, `Medium`, or `Low` (drives the retention bootstrap).
`why` / `cite`	text	One-line justification and the source URL for that cell.

The maker gate is max(B1,B2,B3) ≥ 3 and not isolated; otherwise a country is capable if ICC ≥ 2, a ready adopter if R ≥ 2, and dependent otherwise. The downloaded dataset shows the exact shape of a complete country record.

About this explorer

RSCM scores post-quantum migration readiness and decomposes cryptographic sovereignty into three constructs, indigenous cryptographic capacity, indigenous post-quantum control, and external dependency. A country is classified as a post-quantum maker only when the evidence shows sustained institutional capability in at least one creation layer. This page is the companion to the RSCM paper (arXiv:2609.18477).

How it works

The assessment is produced in two stages. Human coders score each country against a fixed codebook from cited public evidence, recording a level (0–4), an evidence grade, a justification, and a source for every cell. A deterministic pipeline then computes the scores, applies the maker gate, classifies each country, and runs the uncertainty bootstrap. This page only displays those results and, in the Data tab, re-applies the same rules to any entries you add locally.

The three constructs

Indigenous cryptographic capacity (ICC): general capacity, including classical cryptography.
Indigenous post-quantum control: the quantum-safe layer only; its creation cells decide the maker label.
External dependency (ED): the extent to which the deployed post-quantum stack is foreign-supplied.

Version and data

Explorer version:
Dataset last updated:
Assessed countries:

Maintainer and citation

Mohamed Aly Bouke (ORCID 0000-0003-3264-601X), Multimedia University. Please cite the RSCM paper when you use these scores.

M. A. Bouke, “A Global Readiness and Sovereignty Capability Model for Post-Quantum Cryptography Migration,” arXiv:2609.18477, 2026. https://doi.org/10.48550/arXiv.2609.18477

@misc{bouke2026globalreadinesssovereigntycapability,
  title={A Global Readiness and Sovereignty Capability Model for Post-Quantum Cryptography Migration},
  author={Mohamed Aly Bouke},
  year={2026},
  eprint={2609.18477},
  archivePrefix={arXiv},
  primaryClass={cs.CR},
  url={https://arxiv.org/abs/2609.18477}
}

Release policy

The dataset is issued as dated snapshots every six months (March and September). Each snapshot re-scans every country for public artifacts, carries a blind second coding of the maker-gate cells (B1–B3) with the agreement statistics published alongside, and is frozen in the repository so every published figure can be reproduced from its snapshot. See RELEASES.md and CHANGELOG.md. Cite the paper for the model and the snapshot date for the numbers.

Contributing an update

Anyone can propose a correction, an updated country, or a new one. In the Data & extend tab, download the template, fill it following the codebook (a level 0–4, an evidence grade, a justification, and a source for every cell), and upload it to preview how the rules score it. To have a change reviewed for the published dataset, open a Dataset update issue on the project repository (a guided form asks for the filled template and its sources), or email the filled template to bouke@ieee.org. Every proposed cell must carry a public, citable source; proposals touching a maker-gate cell are second-coded blind before they are merged, and accepted contributors are credited in the changelog. The full protocol is in CONTRIBUTING.md.