What are the new NIST post-quantum cryptography standards, and why do they matter now?
Quantum computers will eventually break the encryption protecting your bank account, emails, and state secrets. The race to replace it has already been won.
The answer
In August 2024, the US National Institute of Standards and Technology (NIST) published the first three finalized post-quantum cryptography (PQC) standards after an eight-year evaluation process. FIPS 203 (ML-KEM, based on CRYSTALS-Kyber) handles key encapsulation, FIPS 204 (ML-DSA, based on CRYSTALS-Dilithium) provides digital signatures, and FIPS 205 (SLH-DSA, based on SPHINCS+) offers hash-based signature backup. These algorithms resist attacks from both classical and quantum computers. The urgency stems from "harvest now, decrypt later" attacks - adversaries collecting encrypted data today to decrypt once quantum computers mature. Google Chrome and Apple iMessage already implemented hybrid post-quantum key exchange in 2024. NIST estimates full migration across government systems will take 10–15 years, making immediate adoption critical.
Source: NIST
- post-quantum cryptography
- NIST
- cybersecurity
More from Technology & Innovation
- How does GPS know your exact location?
- How big is the dark web compared to the regular internet?
- How does facial recognition technology actually work?
- What makes quantum computers fundamentally different from regular computers?
- How was WiFi accidentally invented?
- Can artificial intelligence truly be creative?