NIST finalizes post-quantum migration road map with 2030 and 2031 federal deadlines
NIST has published its finalized road map for moving off cryptography that a future quantum computer could break. The report identifies which existing standards are vulnerable, which 2024 post-quantum standards replace them, and the federal deadlines that bind agencies and the vendors and contractors working with them.
- NISTIR 8547 is the finalized transition plan mapping NIST's quantum-vulnerable standards to the post-quantum replacements published in August 2024.
- Executive Order 14412 requires federal high-value assets and high-impact systems to migrate by 2030 for key establishment and 2031 for digital signatures.
- National Security Memorandum 10 set 2035 as the primary target for completing PQC migration across federal systems.
- NIST advises prioritizing migration to the key establishment standard FIPS 203 for sensitive, long-lived data because of the harvest now, decrypt later threat.
- The report covers the full cryptographic supply chain and accommodates a hybrid approach combining conventional and post-quantum encryption.