As cited
Copy frozen at (site build).
regulatory
NIST sets post-quantum cryptography migration priorities, with 2030 deadlines for high-value federal systems
The National Institute of Standards and Technology (NIST) released a comprehensive migration report for transitioning to post-quantum cryptography (PQC) standards to protect against future quantum computer attacks. The report establishes 2030 deadlines for U.S. federal agencies to adopt PQC for key establishment in high-value systems, with digital signature adoption required by December 31, 2031, while setting a 2035 target for completing the full federal migration. Organizations can employ hybrid approaches combining conventional and post-quantum encryption during the transition, which is expected to take over a decade and requires coordinated updates across applications, cryptographic libraries, and public key infrastructures.
Why it matters: Federal agencies and organizations handling sensitive data must begin planning PQC migrations now, as high-value systems face December 2030 deadlines for key establishment; moreover, adversaries are already harvesting encrypted data today for decryption once quantum computers mature, making the transition urgent even though cryptographically relevant quantum computers do not yet exist.
- Source published
- First seen by Cybersecurity Tracker