Post-Quantum Cryptography Deadline Set For 2035 By NIST

The US standards agency NIST has given federal agencies until 2035 to swap out today’s encryption for new digital locks built to withstand future quantum computers.

Key Takeaways

NIST released its final post-quantum cryptography roadmap, NIST IR 8547, on Oct. 27
The report lists which current encryption standards a quantum computer could break and what replaces each one
Federal agencies must plan and finish the switch before 2035
NIST says tech companies can use the same report to plan their own move

NIST said the report sets out the timelines and steps federal agencies must follow to move to its post-quantum cryptography standards. The agency first published those standards in August 2024.

The new report is the plan for actually putting them to use. It names the older standards that are at risk and the newer ones designed to replace them.

What Post-Quantum Cryptography Fixes

Most of today’s online security, from bank logins to software updates, relies on math problems that normal computers cannot solve in any useful time. A large enough quantum computer could solve some of them quickly.

That would let an attacker read protected data or fake digital signatures. Post-quantum cryptography uses new math that quantum computers are not expected to crack.

No quantum computer can do this yet. The worry is that data stolen today could be unlocked years from now, which is why NIST wants the switch done well before the danger arrives.

Also Read: Quantum Alliance Targets Crypto's Quantum Risk With 9-Group Standards Push

Why The Switch Takes Years

Encryption is buried inside almost everything: websites, phones, payment cards, office networks and the chips that sign software updates. Agencies first have to find every place it is used before they can replace it.

Much of that equipment comes from outside suppliers, so the deadline also lands on the companies that sell to the government.

What It Means For Crypto And Big Tech

Cryptocurrencies such as Bitcoin (BTC) and Ethereum (ETH) rely on the same kind of math for their digital signatures. NIST’s report covers government systems, not blockchains, but it adds pressure on crypto wallets, exchanges and custody firms to plan their own upgrades.

Cloud and AI companies that sell to Washington face the same task. Once agencies start asking for post-quantum cryptography in their contracts, suppliers that are not ready risk losing that business.