Suppliers of network equipment, security hardware, and software must upgrade products used by federal agencies to support U.S. post-quantum migration deadlines beginning in 2030.

The National Institute of Standards and Technology (NIST) finalized its "Transition to Post-Quantum Cryptography Standards" report, identifying the algorithms being phased out, their replacements, and infrastructure migration considerations.

NIST IR 8547 builds on the agency’s first three post-quantum cryptography (PQC) standards that were released in August 2024. The new offering addresses the implementation challenge that follows standardization: moving interconnected systems to new cryptography while maintaining compatibility and security.

“The report describes different use cases and says why one migration might take longer than another,” Dustin Moody, the NIST mathematician who leads its PQC standardization project, noted in the agency’s announcement.

Federal deadlines drive supply-chain changes

The report supports requirements already established by Executive Order 14412 and Office of Management and Budget Memorandum M-26-15. Federal high-value assets, high-impact systems, and other prioritized sensitive systems must adopt PQC for key establishment by December 31, 2030, and digital signatures by December 31, 2031. The overall federal migration goal remains 2035.

Separately, NIST will deprecate quantum-vulnerable public-key cryptography after 2030, and disallow its use under its standards and guidelines after 2035. That transition window does not override earlier federal deadlines. The report also serves as a planning framework for industry rather than imposing a universal migration deadline on businesses.

Ali El Kaafarani, founder and CEO of PQC supplier PQShield, noted federal requirements would influence upgrades throughout the technology supply chain.

“Alongside this summer's executive order, this is a welcome intervention,” El Kaafarani explained in a supplied comment. “More than anything, firm deadlines and transition plans from the federal government give the entire supply chain the pressure it needs to upgrade its cryptography against the quantum risk.”

Migration reaches beyond algorithms

The report identifies dependencies spanning network protocols such as TLS, SSH, and IPsec, as well as cryptographic software libraries, hardware security modules, and public key infrastructure. Applications may need those underlying components updated before they can migrate.

Hardware suppliers face particular pressure because research, design, and fabrication lead times can delay the availability of compatible products. Larger keys and different computational requirements may require firmware changes or hardware redesigns.

Organizations also need to prioritize data that must remain confidential for years. Adversaries could collect encrypted traffic today and decrypt it once sufficiently capable quantum computers become available, making key-establishment upgrades an immediate concern.

NIST accommodates hybrid approaches combining conventional and PQC, but cautions that they introduce engineering complexity, performance costs, and potential implementation risks.

El Kaafarani called for sector regulators to establish their own requirements, noting, "the bodies that govern critical sectors like banking, automaking, telecoms, and energy now have the opportunity to match NIST's commitments and make sure that digital and physical infrastructure isn't left vulnerable after 2035."