NIST advances post-quantum cryptography standards to counter quantum and AI threats

The transition to post-quantum cryptography (PQC) is accelerating as the U.S. federal government moves migration from long-term discussion to time-bound activity. This shift is driven by the threat of “harvest now, decrypt later” attacks, where encrypted data is collected today to be decrypted once sufficiently powerful quantum computers become available.

Following the standardization of initial algorithms like CRYSTALS-KYBER, CRYSTALS-Dilithium, FALCON, and SPHINCS+, the National Institute of Standards and Technology (NIST) has entered a new phase of evaluation. NIST has selected nine new candidate digital signature algorithms for a third round of assessment. This move aims to diversify the PQC portfolio beyond structured lattice-based schemes and address emerging vulnerabilities exposed by artificial intelligence systems.

Major technology vendors, including Google, Microsoft, and Cloudflare, have set their own migration deadlines, with some targeting 2029. The urgency is particularly high for sectors like healthcare research, where long-term intellectual property and clinical data must remain secure for decades.