--- title: NIST Report Provides Guidelines for Transition to... description: NIST released NISTIR 8547, a road map for organizations migrating from quantum-vulnerable cryptography to post-quantum standards. Federal systems have a... canonical: https://daily.dev/posts/nist-report-provides-guidelines-for-transition-to-post-quantum-cryptography-standards-bvykzssla twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: NIST Report Provides Guidelines for Transition to Post-Quantum Cryptography Standards | daily.dev og:description: NIST released NISTIR 8547, a road map for organizations migrating from quantum-vulnerable cryptography to post-quantum standards. Federal systems have a... og:url: https://daily.dev/posts/nist-report-provides-guidelines-for-transition-to-post-quantum-cryptography-standards-bvykzssla og:image: https://api.daily.dev/og/posts/BVYkZSsLa.png og:image:alt: NIST Report Provides Guidelines for Transition to Post-Quantum Cryptography Standards og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # NIST Report Provides Guidelines for Transition to Post-Quantum Cryptography Standards **[The Quantum Insider](https://daily.dev/sources/thequantuminsider)** · 5 min read · 0 upvotes · 0 comments ## Summary NIST released NISTIR 8547, a road map for organizations migrating from quantum-vulnerable cryptography to post-quantum standards. Federal systems have a primary target of 2035 for migration, while high-value assets and high-impact systems face earlier deadlines set by Executive Order 14412: 2030 for key establishment and 2031 for digital signatures. The report builds on NIST's 2024 post-quantum algorithm standards and describes how existing algorithms will be phased out, including whether they will be disallowed in federal systems after a certain date or allowed at the user's own risk. Moody says organizations might prioritize migrating to the FIPS 203 key establishment standard for sensitive, long-lived data because of the 'harvest now, decrypt later' threat, and the report discusses hybrid approaches that combine conventional encryption with post-quantum cryptography for added security at the cost of more computation. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### What is the deadline for federal agencies to migrate to post-quantum cryptography? Most federal systems must complete migration to post-quantum cryptography by 2035, per National Security Memorandum 10. Executive Order 14412 accelerated this for high-value assets and high-impact systems, setting 2030 as the deadline for key establishment and 2031 for digital signatures. NIST's report NISTIR 8547 supports and details these timelines for federal agencies and affected contractors. _Teams planning crypto migrations can track NIST guidance like this on daily.dev as deadlines approach._ ### Which NIST standard should organizations prioritize first when migrating to post-quantum cryptography? NIST mathematician Dustin Moody recommends prioritizing migration to the post-quantum key establishment standard FIPS 203 for data that is especially sensitive or needs long-term confidentiality. This addresses the 'harvest now, decrypt later' threat, where adversaries collect encrypted data today intending to decrypt it once sufficiently powerful quantum computers exist. _Developers sequencing a PQC rollout can follow standards updates like FIPS 203 on daily.dev._ ### What is a hybrid approach to post-quantum cryptography migration? A hybrid approach combines conventional encryption with post-quantum cryptography simultaneously, described as being like using two padlocks on a door instead of one. NIST accommodates this option because it is more conservative from a security standpoint, though it demands more computational resources than relying on either method alone. _Architects weighing hybrid versus pure PQC schemes can keep up with NIST's guidance on daily.dev._ ## Similar posts on daily.dev - [Getting ahead of ‘harvest-now-decrypt-later’: Post-quantum cryptography planning](https://daily.dev/posts/getting-ahead-of-harvest-now-decrypt-later-post-quantum-cryptography-planning-rvmbo59g2) · CSO Online · 0 upvotes · 0 comments - [Post-Quantum Cryptography for Authentication: The Enterprise Migration Guide 2026](https://daily.dev/posts/post-quantum-cryptography-for-authentication-the-enterprise-migration-guide-2026-i5hayeibm) · Security Boulevard · 0 upvotes · 0 comments - [The post-quantum EO is an important milestone. Now it’s time to get to work](https://daily.dev/posts/the-post-quantum-eo-is-an-important-milestone-now-it-s-time-to-get-to-work-kxyigr3vm) · Cloudflare · 1 upvotes · 0 comments - [Germany Publishes National Post-Quantum Cryptography Migration Guideline](https://daily.dev/posts/germany-publishes-national-post-quantum-cryptography-migration-guideline-l5ledmryi) · The Quantum Insider · 0 upvotes · 0 comments --- Tags: [#quantum-computing](https://daily.dev/tags/quantum-computing), [#compliance](https://daily.dev/tags/compliance), [#cryptography](https://daily.dev/tags/cryptography), [#encryption](https://daily.dev/tags/encryption) [View this post on daily.dev](https://daily.dev/posts/nist-report-provides-guidelines-for-transition-to-post-quantum-cryptography-standards-bvykzssla) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"NIST Report Provides Guidelines for Transition to Post-Quantum Cryptography Standards","url":"https://daily.dev/posts/nist-report-provides-guidelines-for-transition-to-post-quantum-cryptography-standards-bvykzssla","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/nist-report-provides-guidelines-for-transition-to-post-quantum-cryptography-standards-bvykzssla"},"datePublished":"2026-10-27T19:08:56.076Z","dateModified":"2026-10-29T23:53:40.504Z","description":"NIST released NISTIR 8547, a road map for organizations migrating from quantum-vulnerable cryptography to post-quantum standards. Federal systems have a...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/c0b45139bd2107f2cde044cdb9c0f945?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/c0b45139bd2107f2cde044cdb9c0f945?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"The Quantum Insider","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"The Quantum Insider","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/7b14a6b34c1b464c9e8a88d9a0dac951","url":"https://daily.dev/sources/thequantuminsider"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/nist-report-provides-guidelines-for-transition-to-post-quantum-cryptography-standards-bvykzssla","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"quantum-computing,compliance,cryptography,encryption","timeRequired":"PT5M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"The Quantum Insider","item":"https://daily.dev/sources/thequantuminsider"},{"@type":"ListItem","position":3,"name":"NIST Report Provides Guidelines for Transition to Post-Quantum Cryptography Standards"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/nist-report-provides-guidelines-for-transition-to-post-quantum-cryptography-standards-bvykzssla#faq","mainEntity":[{"@type":"Question","name":"What is the deadline for federal agencies to migrate to post-quantum cryptography?","acceptedAnswer":{"@type":"Answer","text":"Most federal systems must complete migration to post-quantum cryptography by 2035, per National Security Memorandum 10. Executive Order 14412 accelerated this for high-value assets and high-impact systems, setting 2030 as the deadline for key establishment and 2031 for digital signatures. NIST's report NISTIR 8547 supports and details these timelines for federal agencies and affected contractors. Teams planning crypto migrations can track NIST guidance like this on daily.dev as deadlines approach."}},{"@type":"Question","name":"Which NIST standard should organizations prioritize first when migrating to post-quantum cryptography?","acceptedAnswer":{"@type":"Answer","text":"NIST mathematician Dustin Moody recommends prioritizing migration to the post-quantum key establishment standard FIPS 203 for data that is especially sensitive or needs long-term confidentiality. This addresses the 'harvest now, decrypt later' threat, where adversaries collect encrypted data today intending to decrypt it once sufficiently powerful quantum computers exist. Developers sequencing a PQC rollout can follow standards updates like FIPS 203 on daily.dev."}},{"@type":"Question","name":"What is a hybrid approach to post-quantum cryptography migration?","acceptedAnswer":{"@type":"Answer","text":"A hybrid approach combines conventional encryption with post-quantum cryptography simultaneously, described as being like using two padlocks on a door instead of one. NIST accommodates this option because it is more conservative from a security standpoint, though it demands more computational resources than relying on either method alone. Architects weighing hybrid versus pure PQC schemes can keep up with NIST's guidance on daily.dev."}}]} ```