NIST publishes guidance for federal post-quantum cryptography deadlines
Original title: NIST Publishes Guidance to Meet Federal Post-Quantum Deadlines
High-value assets must use PQC for key establishment by December 31, 2030, and for signatures by December 31, 2031.
NIST published a transition plan so US federal agencies and organizations that work with them can meet Executive Order 14412. The order requires PQC for key establishment on high-value assets and high-impact systems by December 31, 2030, and for digital signatures by December 31, 2031. The guidance points to NIST’s 2024 algorithm standards, prioritizes FIPS 203 where data must stay secret for a long time, and allows hybrid conventional-plus-PQC protection for sensitive systems.
Unconfirmed: Company warnings that cryptographically relevant quantum computers could appear within five years are not confirmed.
- Executive Order 14412 was published in June 2026.
- Harvest-now-decrypt-later risk is cited for long-lived sensitive data.
- Hybrid PQC requires more computational resources.
- Canada, Australia, Japan and the UK set milestones from 2028 to 2030.
- Cloudflare, Google and Microsoft have set a 2029 full-migration target.
- 1.Prioritize FIPS 203 migration for long-lived sensitive data.
- 2.Review the cryptographic supply chain, not only internal components.
- 3.Plan whether hybrid PQC is needed for sensitive systems.
- Products
- FIPS 203
- Organizations
- NIST
- Countries
- United States
From the original article
2 min read at infosecurity-magazine.com
The guidance sets out how federal agencies can prioritize PQC adoption for the most sensitive systems, to meet the 2031 transition deadline
By James Coker · infosecurity-magazine.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.