NIST approves its first three post-quantum standards
13 AUGUST 2024, GAITHERSBURG
NIST, the US standards agency, approved its first three post-quantum cryptography standards: FIPS 203 (ML-KEM, a lattice-based method for two parties to establish a shared secret key), FIPS 204 (ML-DSA, a lattice-based digital signature scheme) and FIPS 205 (SLH-DSA, a hash-based signature scheme intended as a backup to the lattice approach). HIPAA Journal describes ML-KEM as the general-purpose choice for protecting traffic on public networks, ML-DSA as the main signature standard, and SLH-DSA as a backup signature method.
The standards closed a process NIST opened in 2016. Holland & Knight reports that the competition began with 82 candidate algorithms and ran through four elimination rounds over eight years. The motivation is the threat that a large-scale quantum computer could break widely used public-key systems, RSA in particular. Holland & Knight also stresses the "harvest now, decrypt later" problem, in which adversaries store encrypted traffic today so they can decrypt it once such a computer exists.
Federal agencies hold the clearest obligation. Holland & Knight ties the start of agency migration to follow-on OMB guidance and notes that agencies must inventory vulnerable systems. Federal IT contractors were already preparing implementations. Private companies that hold long-lived sensitive data face the harvest-now exposure and, in the law firm's words, a rising liability and reputational risk now that the standards are final.
NIST urged quick action. HIPAA Journal quotes Dustin Moody, who leads NIST's post-quantum standardization project, encouraging administrators to start integrating the algorithms immediately because full integration takes time. The same article says technology firms including Google, Apple, Signal and Zoom had already begun adopting them.
Why it matters. These are the finalized NIST post-quantum standards covered by the sources, so vendors and buyers now have named algorithms to ask for. Organizations that hold data with a long confidentiality life should treat the harvest-now risk as a present exposure, not a future one. Because NIST says integration takes time, this suggests starting inventories and vendor conversations now.