Timelines for migration to post-quantum cryptography