The US National Institute of Standards and Technology has released a high-level road map to help organizations move to post-quantum cryptography standards, setting out official timelines and priorities for a transition driven by the threat of future quantum computers.
The report, Transition to Post-Quantum Cryptography Standards (NISTIR 8547), outlines NIST's approach and schedules for moving away from quantum-vulnerable algorithms to quantum-resistant standards. It is intended as the core technical document for federal agencies, industry partners and standards organizations, describing what needs to change and when during the migration.
The urgency stems from the "harvest now, decrypt later" threat, in which adversaries collect sensitive data now with the intention of decrypting it once quantum technology matures. While quantum computers are still in development, a sufficiently powerful device, known as a cryptanalytically relevant quantum computer, would threaten the encryption methods that protect electronic information such as email and financial statements.
National Security Memorandum 10 established 2035 as the primary target for completing the migration across federal systems. Executive Order 14412 accelerated that timeline, requiring federal high-value assets and high-impact systems to migrate by 2030 for key establishment and 2031 for digital signatures. NIST said many organizations that work with the federal government will be affected as well.
The report identifies quantum-vulnerable algorithms among NIST's existing cryptographic standards and provides a transition plan that references the post-quantum algorithm standards NIST published in 2024. "We lay out how certain encryption algorithms people are using today will get phased out," said Dustin Moody, the NIST mathematician who heads the PQC standardization project. "It's important to know how a given algorithm might be disallowed in federal systems after a certain date, for instance, or whether it will be allowed but at the user's own risk."
The report also discusses a hybrid approach that combines conventional encryption with PQC, which Moody compared to using two padlocks on a door instead of one. The option is more conservative from a security standpoint but demands more computational resources.
The publication complements NIST's migration guidelines project at its National Cybersecurity Center of Excellence, which has established a cross-sector collaboration focused on demonstrating PQC implementations and risk management practices. "The new report can help you understand the standards and requirements of the migration," Moody said, "while the NCCoE project can show you the practical tools and blueprints to get the job done."
Analysis
Why This Matters
- The report sets concrete migration deadlines for federal systems, which will ripple through any organization that does business with the US government.
- The "harvest now, decrypt later" threat means data encrypted today could be exposed once a capable quantum computer exists, making the schedule urgent.
- The choice between full and hybrid migration affects both security posture and computing costs.
Background
Post-quantum cryptography refers to encryption designed to resist attacks from a future quantum computer. NIST released its first post-quantum cryptography standards in August 2024. While quantum computers are still in development, a sufficiently powerful device would threaten current encryption methods, which is why the transition is beginning before such a machine appears. The new report is part of a broader US government push to modernize federal cryptography.
What to Watch
- Whether federal agencies meet the accelerated 2030 and 2031 deadlines for high-value assets and high-impact systems.
- How NIST's National Cybersecurity Center of Excellence translates the roadmap into practical tools and blueprints for organizations.
- Whether industry adopts hybrid approaches combining conventional encryption with PQC to hedge against the transition.
Checked
10 claims in this story checked against 1 source: 8 supported.
Show each claim
- SupportedNIST has published a high-level roadmap for transitioning to post-quantum cryptography standards.NIST News: “Now, the agency has released its high-level road map to help organizations switch to these standards.”
- Partly supportedThe report sets out official timelines and priorities for replacing quantum-vulnerable encryption in federal systems.NIST News: “The report describes different use cases and says why one migration might take longer than another.”
- SupportedThe transition is urgent because of the threat that future quantum computers could decrypt data adversaries collect now.NIST News: “today’s encrypted data is already at risk from the “harvest now, decrypt later” threat, where adversaries collect sensitive data now with the intention of decrypting it when quantum technology matures.”
- SupportedNISTIR 8547 is the core technical document meant to inform federal agencies, industry partners and standards organizations about what needs to change and when.NIST News: “It is the core technical document meant to inform federal agencies, industry partners and standards organizations about what needs to change and when during the migration to PQC standards”
- SupportedDustin Moody said, “We lay out how certain encryption algorithms people are using today will get phased out.”NIST News: ““We lay out how certain encryption algorithms people are using today will get phased out,” Moody said.”
- SupportedNational Security Memorandum 10 set 2035 as the primary target for completing the migration across federal systems.NIST News: “National Security Memorandum 10 established the year 2035 as the primary target for completing the migration to PQC across federal systems.”
- SupportedExecutive Order 14412 requires federal high-value assets and high-impact systems to migrate by 2030 for key establishment and 2031 for digital signatures.NIST News: “Executive Order 14412 accelerated this timeline, requiring federal high-value assets and high-impact systems to migrate by 2030 for key establishment and 2031 for digital signatures.”
- SupportedMany organizations that work with the federal government will also be affected by the migration.NIST News: “While the memorandum applies specifically to federal systems, many organizations that work with the federal government will be affected as well.”
- Partly supportedMoody compared the hybrid approach to using two padlocks on a door instead of one.NIST News: “The report also discusses the option of taking a hybrid approach, in which an organization hedges its bets by combining conventional encryption with PQC, akin to using two padlocks on a door instead of one.”
- SupportedThe hybrid approach is more conservative from a security standpoint but requires more computational resources.NIST News: “NIST accommodates this option, which has the advantage of being more conservative from a security standpoint but also demands more computational resources.”