TL;DR
Get the latest gadgets delivered free with Prime
- Fast, free delivery on millions of items
- Prime Video, Amazon Music and more included
- Member-only deals all year
NIST has published NISTIR 8547, a road map for moving from quantum-vulnerable cryptography to post-quantum standards. Federal targets include 2035 for most systems, with earlier deadlines for key establishment and digital signatures in high-value and high-impact systems; organizations are urged to plan around sensitive data, supply chains and system-specific needs.
The National Institute of Standards and Technology has released a road map for replacing cryptographic algorithms vulnerable to future quantum computers, setting out migration priorities and federal deadlines that affect government systems and organizations working with the federal government. The report, NISTIR 8547, follows NIST’s 2024 publication of post-quantum cryptography standards and gives agencies and other organizations guidance for planning the change.
NIST’s report describes which algorithms in existing standards are considered vulnerable and sets out how they are to be phased out in favor of the agency’s post-quantum cryptography (PQC) standards. It supports federal migration targets of 2035 for most systems. For high-value assets and high-impact systems, the source material gives earlier deadlines: 2030 for key establishment and 2031 for digital signatures.
The report does not prescribe one migration plan for every organization. NIST mathematician Dustin Moody, who leads the agency’s PQC standardization project, said the report explains why some use cases may take longer than others. Organizations are advised to examine their own systems and their cryptographic supply chains, since software, hardware and services from other providers can affect the work.
NIST also points to prioritizing information that is particularly sensitive or must remain confidential for a long time. That recommendation relates to the “harvest now, decrypt later” risk: an adversary could collect encrypted data today and attempt to decrypt it if sufficiently capable quantum computers become available in the future. The report discusses hybrid approaches that combine conventional and post-quantum cryptography; NIST says these can provide a more conservative security posture but require additional computing resources.
Federal Deadlines Shape Migration Plans
The report turns previously published PQC standards into a planning framework, giving federal agencies a basis for deciding which systems and algorithms to address and when. The earlier deadlines for key establishment and digital signatures in high-value and high-impact systems make sequencing important: organizations may need to prioritize systems handling long-lived secrets rather than wait for a broad, end-of-decade replacement effort.
Although the stated federal requirements apply to federal systems, NIST says organizations that work with the government may also be affected. Their ability to update cryptography can depend on vendors and other suppliers, so the report’s supply-chain emphasis makes the migration a coordination issue as well as a technical one. For businesses outside the federal sphere, the report offers guidance, but the supplied material does not establish a universal legal deadline.
The timing also reflects a risk that can exist before a quantum computer capable of breaking current cryptography is built. Data collected now may remain sensitive for years. NIST’s guidance gives organizations a way to consider that exposure while planning a change that may take time across interconnected systems.
Products Worth Considering
Samsung 27-Inch Odyssey QD-OLED G8 4K 240Hz Gaming Monitor
Apple iPad Air 11-inch (M2), 512GB, Wi-Fi, Space Gray
Amazon Kindle Paperwhite Signature Edition (12th Generation, 2024), 32 GB, Metallic Black
As an affiliate, we earn on qualifying purchases.
From 2024 Standards to Migration Guidance
In August 2024, NIST published PQC standards designed to resist attacks from a future sufficiently powerful quantum computer. NISTIR 8547 addresses the next step: how to transition away from vulnerable algorithms already used in cryptographic standards and toward the newly published alternatives.
The report supports timelines established for federal systems, including a 2035 primary target under National Security Memorandum 10. The source material says Executive Order 14412 set earlier dates for key establishment and digital signatures in high-value assets and high-impact systems. Those dates do not mean every organization must follow an identical schedule; NIST describes different migration needs and use cases.
NIST’s National Cybersecurity Center of Excellence is also running a cross-sector project on migration to PQC. The project is intended to demonstrate practical tools and approaches for cryptographic visibility, risk management and implementation. NIST describes the report as an explanation of standards and requirements, while the NCCoE project is intended to show practical tools and blueprints.
“We understand there’s not one strategy that fits all use cases, and we want to help people handle their migration while staying abreast of what’s changing.”
— Dustin Moody, NIST mathematician and head of the PQC standardization project
Implementation Details Still Vary
NIST’s road map sets broad direction and federal dates, but the effort required by each organization is not specified as a single timetable. The report accounts for differences among use cases, and the supplied source material does not list every affected product, system or vendor, or give a detailed migration schedule for each one.
The source also does not specify when a cryptanalytically relevant quantum computer will become available. The harvest-now, decrypt-later risk is described as a reason to plan early, not evidence that current encrypted data has already been decrypted by a quantum computer. The practical security and performance trade-offs of hybrid approaches will depend on the systems in which they are used.
It is also not clear from the supplied information how every organization outside the federal government will be affected by the federal deadlines. NIST says federal contractors may be affected, but obligations will depend on applicable requirements and relationships with federal systems.
Agencies Begin Planning and Testing
Federal agencies and organizations supporting them can use NISTIR 8547 to identify vulnerable cryptography, map dependencies across their supply chains and prioritize systems against the published deadlines. The next practical work includes assessing where sensitive data is stored and transmitted, deciding whether hybrid methods suit particular systems, and planning updates with vendors.
NIST’s NCCoE project is expected to contribute demonstrations of cryptographic visibility, risk management and PQC implementations. These activities are intended to help organizations turn standards guidance into practical migration plans. The stated federal milestones remain 2030 for key establishment and 2031 for digital signatures in high-value and high-impact systems, followed by the 2035 target for most federal systems.
Key Questions
What is NISTIR 8547?
NISTIR 8547 is NIST’s report outlining its approach and timelines for moving from quantum-vulnerable cryptographic algorithms to post-quantum standards.
What are the federal migration deadlines?
The source material gives 2035 for most federal systems, with earlier targets of 2030 for key establishment and 2031 for digital signatures in high-value assets and high-impact systems.
Why does NIST recommend starting before powerful quantum computers exist?
NIST cites the possibility that adversaries could collect encrypted information now and try to decrypt it later, if quantum computers capable of breaking current cryptography become available. This is known as “harvest now, decrypt later.”
Does the report require every organization to use a hybrid approach?
No. The report discusses hybrid cryptography, which combines conventional and post-quantum methods, as an option. NIST says it can be more conservative from a security standpoint but uses more computing resources; organizations’ needs differ.
Will the federal deadlines apply to private companies?
The stated deadlines concern federal systems. NIST says organizations working with the federal government may be affected, but the supplied material does not establish a single deadline or legal requirement for every private organization.
Source: rss
