[{"data":1,"prerenderedAt":94},["ShallowReactive",2],{"news-\u002Fnews\u002Fnist-approves-first-three-post-quantum-standards":3},{"id":4,"title":5,"author":6,"authorTitle":7,"authorUrl":8,"body":9,"canonical":8,"category":46,"date":47,"description":48,"draft":49,"extension":50,"faqs":51,"findingsSource":8,"geo":58,"image":60,"industries":61,"keyFindings":8,"meta":64,"modified":65,"navigation":66,"path":67,"pullquote":8,"recommendations":8,"references":68,"related":75,"seo":82,"seoTitle":83,"signposts":8,"slug":84,"stats":8,"stem":85,"tags":86,"tldr":92,"__hash__":93},"news\u002Fnews\u002Fnist-approves-first-three-post-quantum-standards.md","NIST Approves Its First Three Post-Quantum Encryption Standards","ArcQubit Team","",null,{"type":10,"value":11,"toc":42},"minimark",[12,17,24,27,30,33,36],[13,14,16],"h2",{"id":15},"nist-approves-its-first-three-post-quantum-standards","NIST approves its first three post-quantum standards",[18,19,20],"p",{},[21,22,23],"strong",{},"13 AUGUST 2024, GAITHERSBURG",[18,25,26],{},"NIST, the US standards agency, approved its first three post-quantum cryptography standards: FIPS 203 (ML-KEM, a lattice-based method for two parties to establish a shared secret key), FIPS 204 (ML-DSA, a lattice-based digital signature scheme) and FIPS 205 (SLH-DSA, a hash-based signature scheme intended as a backup to the lattice approach). HIPAA Journal describes ML-KEM as the general-purpose choice for protecting traffic on public networks, ML-DSA as the main signature standard, and SLH-DSA as a backup signature method.",[18,28,29],{},"The standards closed a process NIST opened in 2016. Holland & Knight reports that the competition began with 82 candidate algorithms and ran through four elimination rounds over eight years. The motivation is the threat that a large-scale quantum computer could break widely used public-key systems, RSA in particular. Holland & Knight also stresses the \"harvest now, decrypt later\" problem, in which adversaries store encrypted traffic today so they can decrypt it once such a computer exists.",[18,31,32],{},"Federal agencies hold the clearest obligation. Holland & Knight ties the start of agency migration to follow-on OMB guidance and notes that agencies must inventory vulnerable systems. Federal IT contractors were already preparing implementations. Private companies that hold long-lived sensitive data face the harvest-now exposure and, in the law firm's words, a rising liability and reputational risk now that the standards are final.",[18,34,35],{},"NIST urged quick action. HIPAA Journal quotes Dustin Moody, who leads NIST's post-quantum standardization project, encouraging administrators to start integrating the algorithms immediately because full integration takes time. The same article says technology firms including Google, Apple, Signal and Zoom had already begun adopting them.",[18,37,38,41],{},[21,39,40],{},"Why it matters."," These are the finalized NIST post-quantum standards covered by the sources, so vendors and buyers now have named algorithms to ask for. Organizations that hold data with a long confidentiality life should treat the harvest-now risk as a present exposure, not a future one. Because NIST says integration takes time, this suggests starting inventories and vendor conversations now.",{"title":7,"searchDepth":43,"depth":43,"links":44},2,[45],{"id":15,"depth":43,"text":16},"Policy","2024-08-13","NIST approved FIPS 203, 204 and 205, its first post-quantum encryption standards. Vendors and buyers now have named algorithms to request and plan around.",false,"md",[52,55],{"q":53,"a":54},"Who has the clearest obligation under the NIST standards?","Federal agencies hold the clearest obligation, since they must inventory vulnerable systems and migrate after follow-on OMB guidance. Private companies with long-lived sensitive data face harvest-now, decrypt-later exposure and rising liability and reputational risk.",{"q":56,"a":57},"What should organizations do now that the standards are final?","NIST urged administrators to start integrating the algorithms immediately because full integration takes time. Practical first steps are cryptographic inventories and vendor conversations about support for ML-KEM, ML-DSA and SLH-DSA.",[59],"gaithersburg","\u002Fassets\u002Fog-default.png",[62,63],"Cross-Sector","Government Facilities",{},"2026-08-18",true,"\u002Fnews\u002Fnist-approves-first-three-post-quantum-standards",[69,72],{"label":70,"url":71},"Holland & Knight, \"NIST Releases Three Post-Quantum Cryptography Standards,\" Aug. 2024.","https:\u002F\u002Fwww.hklaw.com\u002Fen\u002Finsights\u002Fpublications\u002F2024\u002F08\u002Fnist-releases-three-post-quantum-cryptography-standards",{"label":73,"url":74},"HIPAA Journal, \"NIST Releases Finalized Post-Quantum Encryption Standards,\" Aug. 13, 2024.","https:\u002F\u002Fwww.hipaajournal.com\u002Fnist-releases-finalized-post-quantum-encryption-standards\u002F",[76,79],{"label":77,"url":78},"NIST PQC Standards Guide: FIPS 203, 204, 205","\u002Fblog\u002Fnist-pqc-standards-guide",{"label":80,"url":81},"What NIST Post-Quantum Standards Mean for You","\u002Fblog\u002Fwhat-nist-post-quantum-cryptography-standards-mean",{"title":5,"description":48},"NIST Approves First Three Post-Quantum Standards","nist-approves-first-three-post-quantum-standards","news\u002Fnist-approves-first-three-post-quantum-standards",[87,88,89,90,91],"post-quantum cryptography","PQC migration","harvest now decrypt later","federal compliance","for enterprises","NIST approved FIPS 203, 204 and 205, its first post-quantum encryption standards, so vendors and buyers now have named algorithms to request and plan around.","xDSPju2tgJLXpRwxfoEsX-sHoAqFKDhCjMbBUufMNIg",1792182887096]