Part Two · Post-quantum cryptography
Post-quantum migration timeline, 2024–2035
Key milestones in the migration to post-quantum cryptography, from the first NIST standards in 2024 to the removal of quantum-vulnerable algorithms in 2035.
Migration timeline
- 2024
FIPS 203, 204 & 205 finalized
NIST publishes the first three production-ready PQC standards after an eight-year, multi-round public evaluation process.
- 2025
HQC selected as backup KEM; CNSA 2.0 phase-in begins
The NSA's Commercial National Security Algorithm Suite 2.0 begins phasing in PQC requirements for national security systems, starting with software and firmware signing.
- 2026–2027
FIPS 206 expected; CNSA 2.0 broadens
FN-DSA is expected to be finalized for bandwidth-constrained use cases, while CNSA 2.0 requirements extend further into operating systems and networking equipment.
- 2030
RSA-2048 and ECC P-256 deprecated
Per NIST's transition plan (NIST IR 8547), these widely used classical algorithms are set to be formally deprecated in NIST standards.
- Early 2030s
CNSA 2.0 moves toward exclusive PQC use
National security systems progress toward mandatory, exclusive use of quantum-resistant algorithms under the CNSA 2.0 timeline.
- 2035
Quantum-vulnerable algorithms fully removed
NIST's transition plan calls for removing all quantum-vulnerable algorithms from its standards entirely by this date.