[{"data":1,"prerenderedAt":100},["ShallowReactive",2],{"news-\u002Fnews\u002Fcisa-post-quantum-product-categories-list":3},{"id":4,"title":5,"author":6,"authorTitle":7,"authorUrl":8,"body":9,"canonical":8,"category":46,"date":47,"description":48,"draft":49,"extension":50,"faqs":51,"findingsSource":8,"geo":58,"image":60,"industries":61,"keyFindings":8,"meta":65,"modified":66,"navigation":67,"path":68,"pullquote":8,"recommendations":8,"references":69,"related":82,"seo":89,"seoTitle":90,"signposts":8,"slug":91,"stats":8,"stem":92,"tags":93,"tldr":98,"__hash__":99},"news\u002Fnews\u002Fcisa-post-quantum-product-categories-list.md","CISA Publishes a List of Product Categories That Should Support Post-Quantum Cryptography","ArcQubit Team","",null,{"type":10,"value":11,"toc":42},"minimark",[12,17,24,27,30,33,36],[13,14,16],"h2",{"id":15},"cisa-publishes-a-list-of-product-categories-that-should-support-post-quantum-cryptography","CISA publishes a list of product categories that should support post-quantum cryptography",[18,19,20],"p",{},[21,22,23],"strong",{},"JANUARY 2026, ARLINGTON",[18,25,26],{},"CISA released \"Product Categories for Technologies That Use Post-Quantum Cryptography Standards\" in January 2026. Industrial Cyber and Infosecurity Magazine give 26 January 2026. Executive Order 14306, signed 6 June 2025, directed the list. The order kept the CISA product-category list, now due 1 December 2025, and kept the TLS 1.3 deadline of 2 January 2030, but dropped the requirement that agencies write post-quantum support into solicitations for listed categories. WilmerHale's alert agrees that the list obligation survived while the procurement trigger did not. That makes the list advisory in procurement terms.",[18,28,29],{},"Industrial Cyber reports categories including cloud services, networking, endpoint security, collaboration, identity and access, enterprise security, computing, data systems and telecommunications. MeriTalk says products must implement FIPS 203, 204 and 205 to qualify. Infosecurity Magazine says the NSA helped compile the list, that the list will be updated regularly, and that automated discovery tools and IoT or operational technology devices fall outside it for now.",[18,31,32],{},"MeriTalk and Industrial Cyber quote Acting Director Madhu Gottumukkala saying organizations must prioritize procurement of post-quantum-capable technologies. MeriTalk also quotes former CISA official Garfield Jones predicting that non-post-quantum products will struggle in government sales. CyberScoop reports that experts doubted the list's usefulness, because most listed products address key establishment but not signatures.",[18,34,35],{},"Executive Order 14412 of June 2026 later raised the stakes for the same vendors, as covered in its own entry.",[18,37,38,41],{},[21,39,40],{},"Why it matters."," Vendors in the listed categories should expect federal buyers to ask about post-quantum support, even though the order dropped the formal requirement to write it into solicitations. Buyers can use the list as a starting checklist, but the criticism that it covers key establishment more than signatures suggests they should ask vendors about both. Organizations should expect updates.",{"title":7,"searchDepth":43,"depth":43,"links":44},2,[45],{"id":15,"depth":43,"text":16},"Policy","2026-01-26","CISA's January 2026 list names technology categories that should support post-quantum standards. It is advisory in procurement terms.",false,"md",[52,55],{"q":53,"a":54},"Is the list a binding procurement requirement?","Not in procurement terms. The list obligation survived, but the order dropped the requirement that agencies write post-quantum support into solicitations, so the list is advisory. Experts also noted it covers key establishment more than signatures.",{"q":56,"a":57},"What should vendors and buyers do?","Vendors in listed categories should expect federal buyers to ask about post-quantum support. Buyers can use the list as a starting checklist, ask vendors about both key establishment and signatures, and expect updates.",[59],"arlington","\u002Fassets\u002Fog-default.png",[62,63,64],"Cross-Sector","Government Facilities","Information Technology",{},"2026-09-21",true,"\u002Fnews\u002Fcisa-post-quantum-product-categories-list",[70,73,76,79],{"label":71,"url":72},"CyberScoop, \"CISA publishes a post-quantum shopping list for agencies. Security professionals aren't sold,\" Jan. 26, 2026.","https:\u002F\u002Fcyberscoop.com\u002Fcisa-post-quantum-cryptography-procurement-guide-expert-criticism\u002F",{"label":74,"url":75},"Infosecurity Magazine, \"CISA Releases List of Post-Quantum Cryptography Product Categories,\" Jan. 26, 2026.","https:\u002F\u002Fwww.infosecurity-magazine.com\u002Fnews\u002Fcisa-post-quantum-cryptography\u002F",{"label":77,"url":78},"MeriTalk, \"CISA Releases List of Post-Quantum Cryptography Tech Product Categories,\" Jan. 23, 2026.","https:\u002F\u002Fwww.meritalk.com\u002Farticles\u002Fcisa-releases-list-of-post-quantum-cryptography-tech-product-categories\u002F",{"label":80,"url":81},"WilmerHale, \"New Executive Order Modifies Cybersecurity Requirements to Be Imposed on Federal Contractors and Subcontractors,\" Jun. 13, 2025.","https:\u002F\u002Fwww.wilmerhale.com\u002Fen\u002Finsights\u002Fclient-alerts\u002F20250613-new-executive-order-modifies-cybersecurity-requirements-to-be-imposed-on-federal-contractors-and-subcontractors",[83,86],{"label":84,"url":85},"GSA Issues Post-Quantum Cryptography Buyer's Guide","\u002Fnews\u002Fgsa-post-quantum-cryptography-buyers-guide",{"label":87,"url":88},"Executive Order 14412: The New Post-Quantum Deadline","\u002Fnews\u002Fus-executive-order-14412-post-quantum-deadline",{"title":5,"description":48},"CISA Lists Product Categories for Post-Quantum Support","cisa-post-quantum-product-categories-list","news\u002Fcisa-post-quantum-product-categories-list",[94,95,96,97],"post-quantum cryptography","federal compliance","2030 deadline","for government","CISA's January 2026 list names the technology categories that should support post-quantum standards such as FIPS 203, 204 and 205, serving as advisory guidance for procurement.","J2TURze_PvE0gn3RR8JikKKSt_FjSWIwSLmPD4yV92k",1792182885934]