Czech NUKIB sets a post-quantum algorithm baseline
1 FEBRUARY 2025, BRNO
The Czech National Cyber and Information Security Agency, NUKIB, set a post-quantum algorithm baseline in version 4.0 of its minimum requirements, dated 1 February 2025. The baseline names ML-KEM-1024 for key establishment, ML-DSA-87 and SLH-DSA for signatures, and endorses hybrid schemes. It points Czech organizations to the strongest parameter sets of the NIST standards.
The baseline answers what to adopt rather than when. It sets no migration deadline, so organizations get a clear technical target while the timing stays open. That approach suits an agency that wants to steer algorithm choices early without committing the country to a dated migration schedule it may later need to revise.
Choosing ML-KEM-1024 and ML-DSA-87 signals a conservative stance. These are the highest-security parameter sets of their standards, so selecting them favours a larger security margin over performance. That trade-off fits government systems, which often must protect data for long periods and can accept the extra cost of the strongest options.
Why it matters. NUKIB gives Czech organizations a precise algorithm target without a deadline, which clarifies the technical destination while leaving the schedule flexible. The choice of the strongest parameter sets tells organizations the agency prioritises a wide security margin. Teams can specify these algorithms in new systems now, aligning with both NUKIB and the broader European direction toward the NIST standards and hybrids.