NIST sets post-quantum cryptography migration priorities, with 2030 deadlines for high-value federal systems

Titled ‘Transition to Post-Quantum Cryptography Standards,’ the report identifies existing quantum-vulnerable cryptographic standards and quantum-resistant standards designed to replace them.

Many applications include components that are based on standardized protocols and security technologies that will need to be revised to support using PQC algorithms.

Applications may also rely upon infrastructure components, such as public key infrastructures (PKIs), that would need to be updated to support the PQC algorithms before the applications themselves can migrate to using the PQC algorithms.

NIST’s transition schedule supports this risk-based approach of quantum-vulnerable public-key cryptography will be deprecated after 2030 and disallowed under NIST standards and guidelines after 2035.

He added that formal PQC standards have existed for two years now, but there is no one-size-fits-all way to implement them.