NIST starts the countdown to retire quantum-vulnerable encryption

The National Institute of Standards and Technology (NIST) has released a roadmap for moving to post-quantum cryptography (PQC), with earlier deadlines for certain sensitive federal systems.

The report, Transition to Post-Quantum Cryptography Standards (NIST IR 8547), explains which cryptographic methods need to be replaced, what organizations should consider and how the transition will unfold.

It builds on the post-quantum cryptography standards NIST released in August 2024.

What migration involves Moving to post-quantum cryptography involves more than changing a setting or installing a single update.

What the phaseout means NIST will deprecate quantum-vulnerable public-key cryptography after 2030 and disallow its use under NIST standards and guidelines after 2035.