NIST finalizes U.S. roadmap for post-quantum cryptography, ties agencies and contractors to White House deadlines

The National Institute of Standards and Technology has finalized the U.S. government’s roadmap for moving to post-quantum cryptography, giving federal agencies — and, increasingly, their contractors and major technology suppliers — an official migration guide tied to White House deadlines.

In a news release published Tuesday, NIST said its final report, “Transition to Post-Quantum Cryptography Standards,” or NISTIR 8547, “outlines NIST’s official approach and timelines for transitioning away from quantum-vulnerable algorithms to quantum-resistant standards.” The document identifies the current public-key cryptography that future quantum computers could break and maps it to newer replacements designed to resist those attacks.

That makes the release more than another technical publication. With post-quantum standards already in place, NISTIR 8547 turns existing policy into a practical transition framework for agencies that have to inventory systems, replace cryptography and plan deadlines across sprawling federal networks.

Those deadlines are no longer abstract. National Security Memorandum-10, signed in 2022, set a governmentwide goal of mitigating as much quantum risk as feasible by 2035. Executive Order 14412, signed June 22, 2026, accelerated that schedule for some of the government’s most sensitive systems.

Under the order, federal high-value assets and high impact systems must “transition all HVAs and high impact systems to use PQC for key establishment by December 31, 2030; [and] transition all HVAs and high impact systems to use PQC for digital signatures by December 31, 2031.”

The order also broadens the story beyond agency IT departments. It directs the Federal Acquisition Regulatory Council, which writes purchasing rules for the federal government, to issue a proposed procurement rule requiring covered contractors to comply by Dec. 31, 2030 with NIST post-quantum Federal Information Processing Standards. That gives the transition a supply-chain and compliance dimension for vendors that sell cryptographic products, software and services into the federal market.

In plain terms, post-quantum cryptography refers to new encryption and digital-signature algorithms built to withstand attacks from future quantum computers. Today’s widely used public-key systems underpin everything from website certificates and encrypted network sessions to software signing and secure hardware. Replacing them is not a one-software update problem; it affects certificates, firmware, hardware security modules and older or constrained devices that may be difficult to upgrade.

NIST said organizations may want to prioritize key-establishment migration first. The reason is the “harvest now, decrypt later” risk: An adversary could collect encrypted data today and try to unlock it later if quantum capabilities improve. The report also endorses hybrid migration approaches — using classical and post-quantum cryptography together during the transition — as a conservative option while organizations work through compatibility and deployment challenges.

“The report describes different use cases and says why one migration might take longer than another,” said Dustin Moody, a NIST mathematician who leads the agency’s post-quantum cryptography standardization project.

The guidance builds on NIST’s first three finalized post-quantum cryptography standards, issued Aug. 13, 2024: FIPS 203 for ML-KEM, FIPS 204 for ML-DSA and FIPS 205 for SLH-DSA. Those standards marked the shift from years of research and competition into formal federal specifications agencies and vendors could implement.

NIST has been running its post-quantum cryptography standardization effort since 2016. But with the standards now published and White House deadlines attached, the issue has moved decisively from research into migration planning, budgeting and eventual compliance.

The final report follows an initial public draft of NISTIR 8547 released Nov. 12, 2024. NIST accepted comments through Jan. 10, 2025 before issuing the final version Tuesday. The agency said the document is aimed at federal agencies but can also serve as a resource for technology providers and other organizations developing their own quantum-readiness plans.