NIST Finalizes ML-KEM, ML-DSA, SLH-DSA Post-Quantum Cryptography Standards; NSA Mandates Implementation in National Security Systems by 2027

September 20, 2026

CSOonline USA

Overview

The National Institute of Standards and Technology (NIST) finalized its core Post-Quantum Cryptography (PQC) standards—ML-KEM, ML-DSA, and SLH-DSA—in August 2024, marking a critical step in preparing for quantum computer threats. The National Security Agency (NSA) has mandated the adoption of quantum-resistant cryptography in new National Security Systems acquisitions by 2027. This move addresses the “Harvest Now, Decrypt Later” threat, where adversaries could collect encrypted data today for future decryption by quantum computers.

In Depth

Key Findings: PQC Standards Finalized, NSA Mandates, and Global Roadmaps

The transition to post-quantum cryptography (PQC) is accelerating globally, driven by the imminent threat of quantum computers capable of breaking current encryption methods. The U.S. National Institute of Standards and Technology (NIST) finalized its primary PQC algorithms—ML-KEM (key encapsulation mechanism) and ML-DSA, SLH-DSA (digital signatures)—as Federal Information Processing Standards (FIPS) in August 2024. This landmark achievement provides a concrete framework for organizations worldwide to begin their migration strategies away from vulnerable classical cryptosystems like RSA-2048 and ECC P-256, which are slated for deprecation by 2030 and full retirement by 2035.

Technical & Regulatory Details: NIST Specifications and Compliance Directives

NIST SP 800-208 and FIPS 203, 204, 205: These documents officially designate the selected PQC algorithms, providing detailed specifications for their implementation. ML-KEM is crucial for establishing secure cryptographic keys, while ML-DSA and SLH-DSA provide robust digital signature capabilities, forming the backbone of future quantum-resistant security.
NSA’s CISA 2.0: The National Security Agency’s Commercial National Security Algorithm (CISA) 2.0 suite mandates the use of quantum-resistant cryptography (QRC) for all new National Security Systems (NSS) procured after 2027. This directive underscores the strategic importance of PQC to national security and sets an aggressive timeline for government and defense sectors.
International PQC Roadmaps: Beyond the U.S., the UK’s National Cyber Security Centre (NCSC) has outlined a PQC migration roadmap extending to 2035, urging early preparation across critical infrastructure. Sweden is also developing a national quantum strategy, including PQC, while Singapore has committed S$300 million to quantum tech research. These initiatives highlight a coordinated international effort to establish a secure, quantum-resistant digital future.

Background & Context: Addressing the “Harvest Now, Decrypt Later” Threat

The “Harvest Now, Decrypt Later” paradigm poses a significant and immediate threat: malicious actors are already collecting vast amounts of encrypted data, anticipating the future development of sufficiently powerful quantum computers that can efficiently break today’s public-key cryptography. Data requiring long-term confidentiality, such as government secrets, sensitive medical records, intellectual property, and critical financial transactions, are particularly at risk. PQC is designed to counter this threat by employing mathematical problems believed to be intractable even for large-scale quantum computers, thereby securing information against future quantum attacks.

Strategic Significance & Outlook: Building Crypto-Agility and Industry Impact

The migration to PQC is a monumental undertaking, demanding a comprehensive and agile approach. Organizations must first conduct a thorough inventory of their cryptographic assets, identify dependencies, and prioritize systems for upgrade. Crucially, developing “crypto-agility”—the ability to rapidly switch out cryptographic algorithms—will be essential for adapting to evolving threats and new PQC standards. Collaboration with PQC-ready vendors and adherence to multi-phase migration playbooks (e.g., CISA/NSA/NIST’s six-phase approach) are key to a successful transition. This shift will not only safeguard critical data but also foster innovation in the cybersecurity industry, creating new service offerings and specialized expertise. Proactive adoption of PQC is not merely a compliance issue but a strategic imperative for long-term digital resilience and competitive advantage in the quantum era.

Source: https://daily.dev/posts/getting-ahead-of-harvest-now-decrypt-later-post-quantum-cryptography-planning-rvmbo59g2

Get our weekly technology intelligence — free

Receive an infographic that lets you judge at a glance whether each field’s analysis report is worth reading.

Subscribe Free — Weekly Tech Intelligence

By subscribing, you’ll receive Troy-Technical’s weekly technology intelligence newsletter.