NIST Releases PQC Standards and Roadmap to Guide Transition Away From Quantum-Vulnerable Algorithms

According to NIST News, the National Institute of Standards and Technology (NIST) released post-quantum cryptography (PQC) standards in August 2024 designed to resist attacks from future quantum computers. Subsequently, the agency published a high-level roadmap to aid organizations in transitioning to these standards.

The document, titled Transition to Post-Quantum Cryptography Standards (NISTIR 8547), details NIST's official methodology and schedules for moving away from cryptographic algorithms vulnerable to quantum attacks toward quantum-resistant ones. This report serves as the primary technical guide for federal agencies, industry partners, and standards organizations regarding necessary changes and associated timelines during the PQC migration, noting that specific details will vary by organization while broad timelines apply.

NIST mathematician Dustin Moody, who leads the PQC standardization project, stated that the report details various use cases and explains why one migration might require more time than another, emphasizing that no single strategy fits all scenarios and the goal is to assist with migration while tracking changes.

Although quantum computers are still under development, a sufficiently powerful device, termed a cryptanalytically relevant quantum computer, poses a threat to encryption methods securing confidential electronic information, such as financial statements and email messages. The urgency for transitioning to PQC stems partly from the "harvest now, decrypt later" threat, where adversaries gather sensitive data presently intending to decrypt it once quantum technology matures.

National Security Memorandum 10 set 2035 as the main target date for completing the PQC migration across federal systems. Executive Order 14412 further accelerated this schedule, mandating that federal high-value assets and high-impact systems migrate by 2030 for key establishment and by 2031 for digital signatures. NISTIR 8547 supports these migration timelines, and while the memorandum is specific to federal systems, many organizations collaborating with the federal government will also be impacted.

The NIST report identifies existing cryptographic standards that utilize quantum-vulnerable algorithms. It then furnishes a transition plan for these vulnerable algorithms, referencing the post-quantum algorithm standards that NIST published in 2024. Moody noted that the report explains how certain encryption algorithms currently in use will be phased out, advising on whether an algorithm might be disallowed in federal systems after a specific date or permitted only at the user's own risk, which can aid organizational planning.

Given that migration is a logistically complex endeavor, the report also outlines various factors organizations must consider, including not only their internal system components but also their entire cryptographic supply chain. Moody mentioned that certain actions may take precedence; for instance, due to the "harvest now, decrypt later" threat, organizations might prioritize migrating to the PQC key establishment standard (FIPS 203) for data requiring long-term security or high sensitivity.

The publication also addresses the possibility of employing a hybrid approach, where an organization combines conventional encryption with PQC to mitigate risk, similar to using two locks on a door instead of one. NIST supports this option, which offers a more conservative security posture but requires greater computational resources.

The contents of the publication align with the migration to PQC guidelines project at NIST’s National Cybersecurity Center of Excellence (NCCoE). This project has established a cross-sector collaboration focused on utilizing the NIST PQC standards, working on demonstrations of risk management practices and cryptographic visibility to help prioritize the PQC migration. Moody stated that the new report assists in understanding the migration standards and requirements, while the NCCoE project offers practical tools and blueprints for execution.