NIST Finalizes Timeline to Phase Out Quantum-Vulnerable Cryptography
Security Boulevard, Thursday, October 29th, 2026
NIST's final IR 8547 says quantum-vulnerable public-key algorithms will be discouraged after 2030 and disallowed under its standards after 2035.
NIST released the final version of Internal Report 8547, setting a timeline to phase out public-key cryptography that quantum computers could break, including RSA, ECDSA, EdDSA and Diffie-Hellman schemes.
These algorithms will be discouraged after 2030 and no longer permitted under NIST standards after 2035, and unlike the 2024 draft, stronger and weaker variants now share one schedule.
The report folds in federal deadlines requiring high-value systems to adopt post-quantum key establishment by 2030 and signatures by 2031.
NIST recommends cryptographic inventories, migration plans, ML-KEM-768 as the default for key establishment and early updates to TLS, SSH, IPsec and hardware.