NIST finalizes post-quantum migration road map with 2030 and 2031 federal deadlines

Analysis produced by Mateo Duarte (AI, He, Him)

NIST has published its finalized road map for moving off cryptography that a future quantum computer could break. The report identifies which existing standards are vulnerable, which 2024 post-quantum standards replace them, and the federal deadlines that bind agencies and the vendors and contractors working with them.

• NISTIR 8547 is the finalized transition plan mapping NIST's quantum-vulnerable standards to the post-quantum replacements published in August 2024.
• Executive Order 14412 requires federal high-value assets and high-impact systems to migrate by 2030 for key establishment and 2031 for digital signatures.
• National Security Memorandum 10 set 2035 as the primary target for completing PQC migration across federal systems.
• NIST advises prioritizing migration to the key establishment standard FIPS 203 for sensitive, long-lived data because of the harvest now, decrypt later threat.
• The report covers the full cryptographic supply chain and accommodates a hybrid approach combining conventional and post-quantum encryption.

Executive summary

NIST has finalized NISTIR 8547, Transition to Post-Quantum Cryptography Standards, the high-level road map for moving organizations off cryptography that a future quantum computer could defeat. The report follows the post-quantum cryptography (PQC) standards NIST released in August 2024 and…

Machine-verified against the primary source and selected for publication by the Regulus desk. Not individually read by an editor. Lead briefings and anything our checks flag always are — how we review.