The National Institute of Standards and Technology (NIST) has released a finalized report that lays out how organizations should move from encryption that future quantum computers could break to new quantum-resistant standards. The report, titled Transition to Post-Quantum Cryptography Standards (NISTIR 8547), was published Oct. 27, 2026.
According to NIST, the report is meant to inform federal agencies, industry partners and standards organizations about what needs to change and when. It can also serve as a resource for technology providers and organizations building their own quantum-readiness plans. NIST said the details of a migration will vary by organization, but the timelines apply broadly.
NIST released its post-quantum cryptography standards in August 2024. The new report identifies quantum-vulnerable algorithms among NIST’s existing cryptographic standards and sets out a transition plan for them, referring to the 2024 standards as replacements.
NIST said a sufficiently powerful quantum computer, known as a cryptanalytically relevant quantum computer, would threaten the encryption that protects information from email messages to financial statements. Such a device does not yet exist, as quantum computers are still in development. NIST also pointed to a threat called “harvest now, decrypt later,” in which adversaries collect sensitive data today to decrypt it once quantum technology matures. The agency said this threat is one of the main reasons the transition is urgent.
The report supports federal migration deadlines set elsewhere. NIST said National Security Memorandum 10 set 2035 as the primary target for completing the move across federal systems. Executive Order 14412 accelerated that timeline, requiring federal high-value assets and high-impact systems to migrate by 2030 for key establishment and by 2031 for digital signatures. NIST said the memorandum applies specifically to federal systems, but many organizations that work with the federal government will be affected as well.
Dustin Moody, a NIST mathematician who heads the post-quantum standardization project, said the report explains how certain algorithms in use today will be phased out. He said an algorithm might be disallowed in federal systems after a certain date, or allowed only at the user’s own risk. Moody said such factors can help an organization plan.
The report also says organizations should look beyond their own systems to their entire cryptographic supply chain. Moody said some actions may take priority. Because of the “harvest now, decrypt later” threat, he said, organizations might first move data that is especially sensitive, or that must stay secure for a long time, to the post-quantum key establishment standard, known as FIPS 203.
The report additionally discusses a hybrid approach, which combines conventional encryption with post-quantum methods. NIST compared it to using two padlocks on a door instead of one. The agency said this option is more conservative from a security standpoint but requires more computing resources.
NIST said the report complements a migration project at its National Cybersecurity Center of Excellence. That project is a cross-sector effort that is working on demonstrations of cryptographic visibility and risk management practices to help prioritize migration. Moody said the report explains the standards and requirements, while the center’s project can show practical tools and blueprints.