NIST Recommends Phased, Hybrid Approach to Post-Quantum Migration
Summary
NIST’s guidance outlines a phased move to post-quantum cryptography, including priority use cases, transition timelines and hybrid approaches. It says hybrid measures can reduce single-algorithm risk but add implementation complexity and should generally be temporary.
Key points
- NIST’s guidance is a technical framework for federal high-value assets and high-impact systems, and a blueprint for critical infrastructure operators.
- The article identifies code signing, asymmetric-key sign-in, data transmission over TLS or VPNs, and email and document signing and encryption as use cases for quantum-resistant protection.
- NIST says data-in-transit protection needs attention now because of the risk of “harvest now, decrypt later” attacks; user-machine authentication can wait until cryptographically relevant quantum computers exist.
- NIST expects quantum-vulnerable and quantum-resistant algorithms to coexist during migration. Hybrid approaches may combine classical and quantum-safe algorithms or multiple post-quantum options.
- NIST plans to deprecate quantum-vulnerable digital signature algorithms after 2030 and disallow their use under its standards and guidelines after 2035.
- NIST has approved the ML-KEM family for key exchange and selected an alternative KEM in 2025; the alternative is still undergoing formal approval and documentation.
- NIST says hybrid approaches can mitigate individual algorithm or implementation flaws, but add complexity, cost and risk, and are typically temporary.
Article Details
- Publisher
- Data Breach Today (ISMG)
- Scope
- NIST guidance on post-quantum cryptography migration for federal high-value assets and high-impact systems, with potential relevance to critical infrastructure operators.
- Key Statistics
- The report identifies four use cases for quantum-resistant protection: software code signing, asymmetric-key user sign-in, data transmission over public networks, and email and document signing and encryption.
- NIST says migration from algorithm standardization to full integration has historically taken 10 to 20 years.
- Federal agencies are expected to move from inventory to early migration in 2027.
- OMB ordered federal agencies in June to migrate as much quantum risk as feasible by the end of 2030; the article does not specify the year of that June order.
- NIST plans to deprecate quantum-vulnerable digital signature algorithms after 2030 and disallow them under its standards and guidelines after 2035.
- Recommendations
- Prioritize migration of transport-layer encryption protecting data in transit, which the report says needs attention now.
- Federal agencies should work toward OMB’s target of migrating as much quantum risk as feasible by the end of 2030.
- Treat hybrid solutions as temporary migration measures and account for their added implementation and architectural complexity.
People
Andrew RegenscheidNamed as an author of the NIST report on post-quantum cryptography migration.Angela RobinsonNamed as an author of the NIST report on post-quantum cryptography migration.David CooperNamed as an author of the NIST report on post-quantum cryptography migration.Dustin MoodyNamed as an author of the NIST report on post-quantum cryptography migration.Ray PerlnerNamed as an author of the NIST report on post-quantum cryptography migration.