Post-Quantum Key Exchange on Cisco Routers - IPsec Series, Part 9
Cisco, Tuesday, September 1st, 2026
Cisco demonstrates a phased migration from classical to PPK to hybrid ML-KEM-768 key exchange on Cisco 8000 routers with zero outage.
Part nine of Cisco's IPsec series is a hands-on lab using three Cisco 8000 routers running IOS XE 26.2. The post walks the key exchange from classical Diffie-Hellman through post-quantum preshared keys to native hybrid ML-KEM-768.
It then demonstrates that a phased rollout across hub and spoke sites works with zero outage, which is the practical concern blocking most PQC migrations. The result is a concrete migration recipe rather than a standards overview.