NIST publishes a timeline for the shift to quantum-safe cryptography by 2030 and 2031.

The US agency NIST has released report NISTIR 8547. Federal agencies must move key exchange to quantum-safe standards by 2030 and digital signatures by 2031. The report also serves companies as a template for their own migration.

NIST published report NISTIR 8547 on October 27. It lists today's encryption methods that would be vulnerable to a future quantum computer and maps them to the matching quantum-safe replacement standards that NIST finalized in August 2024. Under a 2025 executive order, the most critical federal systems must switch key exchange by 2030 and digital signatures by 2031, while an earlier memorandum had set 2035 as the target for all federal systems.

The report is formally aimed at federal agencies, but it also affects any company that works with the federal government or supplies technology to agencies. NIST mathematician Dustin Moody notes that the urgency comes from the risk that encrypted data is being captured today and decrypted later, once powerful quantum computers exist. The report recommends migrating especially sensitive or long-lived data first to the new key exchange standard FIPS 203, and it also describes a hybrid approach that combines classical and quantum-safe encryption.

What remains open is how quickly suppliers and software vendors will actually implement the new standards, since a company's entire cryptographic supply chain has to move along. The hybrid approach is considered safer but uses more computing power, which raises migration costs. The National Cybersecurity Center of Excellence also offers practical tools and sample implementations that organizations can use to plan their own migration.

This story was produced automatically from the source named above and checked by software before publication. The image is symbolic and shows neither the event nor a real person. How this paper is made