NIST sets 2030 and 2035 dates to drop quantum-vulnerable crypto
Original title: NIST starts the countdown to retire quantum-vulnerable encryption
Prioritized federal systems must use quantum-resistant key establishment by the end of 2030 and signatures by the end of 2031.
NIST released Transition to Post-Quantum Cryptography Standards (NIST IR 8547), a roadmap for replacing quantum-vulnerable public-key cryptography. It builds on the post-quantum standards NIST published in August 2024. National Security Memorandum 10 keeps 2035 as the federal migration target, while later executive orders and OMB Memorandum M-26-15 pull some sensitive systems forward. NIST will deprecate vulnerable public-key methods after 2030 and disallow them under its standards after 2035.
- High-value and other prioritized federal systems face a December 31, 2030 key-establishment deadline.
- The quantum-resistant digital-signature deadline for those systems is December 31, 2031.
- Agencies must support TLS 1.3 by January 2, 2030.
- NIST says earlier cryptographic transitions have taken 10 to 20 years.
- Deprecation still allows use after a risk decision; disallowance prohibits the specified use.
- Organizations
- NIST
- Countries
- United States
From the original article
3 min read at helpnetsecurity.com
The National Institute of Standards and Technology (NIST) has released a roadmap for moving to post-quantum cryptography (PQC), with earlier deadlines for certain sensitive federal systems. The report, Transition to Post-Quantum Cryptography Standards (NIST IR 8547), explains which cryptographic methods need to be replaced, what organizations should consider and how the transition will unfold.
By Anamarija Pogorelec · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.