What Happened
Post-Quantum Cryptography Deadline Looms Amid Assurance Concerns
The National Security Agency has set a deadline for the implementation of post-quantum cryptography in new commercial National Security Systems, starting in 2027. However, even fully migrated systems can carry a stale green check mark, indicating that the evidence used to approve the configuration is not current. This raises concerns about the assurance of these systems, as changes to software, firmware, or trust anchors can render the evidence obsolete. The Pentagon’s post-quantum strategy requires systems to support post-quantum cryptography by the end of 2030 and use it by the end of 2031. This article was first reported by an unknown source.