NIST releases final IR 8547 roadmap for migrating to post-quantum cryptography

NIST has published the final version of Internal Report 8547, a high-level roadmap to help organizations transition from quantum-vulnerable public-key algorithms to the post-quantum cryptography standards it finalized in 2024.

Timelines for federal systems

The report aligns with Executive Order 14412 and related OMB guidance that set accelerated deadlines for federal high-value assets and high-impact systems. Key establishment must move to PQC by December 31, 2030, and digital signatures by December 31, 2031. Broader federal migration targets 2035, with quantum-vulnerable algorithms deprecated after 2030 and disallowed after December 31, 2035 under NIST standards.

Core standards and priorities

The three 2024 standards form the foundation: FIPS 203 (ML-KEM) for key establishment, FIPS 204 (ML-DSA) and FIPS 205 (SLH-DSA) for digital signatures. NIST recommends ML-KEM-768 as a default starting point for many use cases. The report stresses the "harvest now, decrypt later" risk, where adversaries collect encrypted data today for future quantum decryption, and advises prioritizing long-lived or highly sensitive data first.

• Hybrid deployments that combine classical and PQC algorithms are explicitly supported as a conservative option, though they increase computational overhead.
• Organizations must consider their full cryptographic supply chain, not just their own systems.
• TLS and other early protocols are flagged for priority attention in follow-on guidance.

Practical implications

The guidance is primarily directed at federal agencies and their contractors, but any organization handling data that must remain confidential for years will face similar planning pressures. NIST mathematician Dustin Moody noted that migration strategies will differ by use case and that the report aims to give teams concrete factors to weigh rather than a single prescribed path. Complementary work at the NCCoE focuses on practical tools and demonstrations to support these timelines.

The report is available on the NIST CSRC site. Organizations should review IR 8547 alongside their existing cryptographic inventories to identify which systems and data flows require the earliest attention.

Sources

• www.nist.gov
• csrc.nist.gov

Cover photo by Santhosh Kanthala on Pexels, used under the Pexels License.