MENU

NIST Advances Quantum-Safe Algorithm Standardization: PQShield Maps Global Regulations, Urgent Need for System Protection by 2030

AT&T Business USA
Overview
The U.S. National Institute of Standards and Technology (NIST) is actively driving the standardization of Post-Quantum Cryptography (PQC) to protect data from future quantum computers. NIST finalized its first three PQC standards, including ML-KEM for key establishment and ML-DSA for digital signatures, in 2024, providing a foundation for organizations to upgrade their cryptographic systems. PQShield is working with NIST to map the global regulatory landscape for PQC, with national authorities targeting quantum-safe critical systems by 2030 and standard ones by 2035.
In Depth

Key Findings

The U.S. National Institute of Standards and Technology (NIST) is vigorously advancing its standardization process for Post-Quantum Cryptography (PQC) to counteract the looming threat of cryptographic breaches by future high-performance quantum computers. In 2024, NIST finalized its initial three PQC standards, which include ML-KEM for key establishment and ML-DSA for digital signatures. This represents the first tangible step for enterprises and government bodies to implement measures protecting their existing digital systems from quantum threats.

Technical / Clinical Details

PQC encompasses a suite of new cryptographic algorithms designed around mathematical problems that quantum computers cannot efficiently solve, such as lattice-based, hash-based, and code-based cryptography. NIST, following an extensive vetting process, has selected several PQC algorithms and is promoting their international adoption. Specialized firms like PQShield are collaborating with NIST to map global regulatory and standardization trends in PQC. This collaboration provides crucial information for organizations worldwide to assess their cryptographic assets and formulate transition plans. Debates continue regarding hybrid cryptographic systems (combining classical and PQC), with the U.S. National Security Agency (NSA) forbidding them, while European bodies like ANSSI and BSI recommend them for backward compatibility, illustrating regulatory divergences.

Background & Context

The advancement of quantum computers harbors the theoretical potential to break widely used public-key cryptographic systems (e.g., RSA and elliptic curve cryptography). Addressing this ‘Q-Day’ before its arrival is a pressing imperative. National entities and critical infrastructure sectors are urged to swiftly transition to PQC to safeguard sensitive data from quantum attacks. Cybersecurity agencies globally have published PQC migration roadmaps, with national targets set for critical products to be quantum-safe by 2030 and standard products by 2035. This transition is not merely a software upgrade but entails extensive changes to broader system infrastructure, necessitating long-term planning and substantial investment.

Strategic Significance & Outlook

NIST’s finalization of PQC standards and the evolving global regulatory framework are paramount for enterprises and government bodies to prepare for a quantum-safe future. Implementing PQC algorithms and executing large-scale migrations involve not only technical challenges but also considerations regarding cost, compatibility, and workforce training. Over the coming years, the market for PQC products and services is anticipated to expand rapidly, with security vendors accelerating the development of solutions compliant with the new PQC standards. International cooperation and harmonized standardization are expected to facilitate the smooth adoption and widespread deployment of PQC, establishing the bedrock for digital security in the quantum era.

Source: https://www.business.att.com/learn/articles/what-is-post-quantum-cryptography.html

Get our weekly technology intelligence — free

Receive an infographic that lets you judge at a glance whether each field’s analysis report is worth reading.

Subscribe Free — Weekly Tech Intelligence

By subscribing, you’ll receive Troy-Technical’s weekly technology intelligence newsletter.

  • Your email and selected fields are used only to deliver the newsletter.
  • We never share your information with third parties.
  • You can unsubscribe anytime via the link in each email.

See our Privacy Policy for details.

Takes about a minute · Unsubscribe anytime

Let's share this post !

Author of this article

Comments

To comment

TOC