NIST 2021 paper warns post-quantum migration is hard and slow
28 APRIL 2021, GAITHERSBURG
NIST published the cybersecurity white paper "Getting Ready for Post-Quantum Cryptography" on 28 April 2021, more than three years before it finalized the first standards. The paper made a blunt point: migrating to post-quantum cryptography is hard and slow. It estimated a 5 to 15 year gap between standardizing new algorithms and completing their rollout across an organization's systems.
The paper used that estimate to argue for starting cryptographic discovery immediately. Discovery means finding where an organization uses cryptography, and that work does not depend on which algorithm eventually replaces the vulnerable one. An organization can map its cryptographic dependencies while the standards are still in draft, so that migration can begin the moment the standards arrive rather than starting from a blank page.
The paper also pushed organizations toward crypto agility, the ability to swap cryptographic algorithms without re-engineering the systems around them. Teams that build this flexibility find each future transition easier, not just the current one. The combination of early discovery and crypto agility is the foundation the paper recommended laying before any specific algorithm was chosen.
Why it matters. The 2021 paper set the expectation that migration measures in years, not months, and that framing still holds. The standards it anticipated arrived in 2024, and the 5 to 15 year estimate underpins the federal deadlines that now run to 2030, 2031 and 2035. Organizations that started discovery when the paper urged it are years into the work; those that have not should treat the estimate as a reason to begin now.