[{"data":1,"prerenderedAt":93},["ShallowReactive",2],{"news-\u002Fnews\u002Fnist-cswp-39-crypto-agility-guidance":3},{"id":4,"title":5,"author":6,"authorTitle":7,"authorUrl":8,"body":9,"canonical":8,"category":46,"date":47,"description":48,"draft":49,"extension":50,"faqs":51,"findingsSource":8,"geo":58,"image":60,"industries":61,"keyFindings":8,"meta":64,"modified":65,"navigation":66,"path":67,"pullquote":8,"recommendations":8,"references":68,"related":75,"seo":82,"seoTitle":83,"signposts":8,"slug":84,"stats":8,"stem":85,"tags":86,"tldr":91,"__hash__":92},"news\u002Fnews\u002Fnist-cswp-39-crypto-agility-guidance.md","NIST Publishes Its Updated Guidance on Crypto Agility","ArcQubit Team","",null,{"type":10,"value":11,"toc":42},"minimark",[12,17,24,27,30,33,36],[13,14,16],"h2",{"id":15},"nist-publishes-its-updated-guidance-on-crypto-agility","NIST publishes its updated guidance on crypto agility",[18,19,20],"p",{},[21,22,23],"strong",{},"4 MARCH 2025, GAITHERSBURG",[18,25,26],{},"NIST Cybersecurity White Paper 39, \"Considerations for Achieving Cryptographic Agility: Strategies and Practices,\" examines how organizations can replace and adapt cryptographic algorithms in protocols, applications, software, hardware, firmware and infrastructure while keeping systems running. Practitioners call this ability to swap algorithms crypto agility. NIST released the initial public draft on 4 March 2025, with updates on 5 March, and took comments through 30 April 2025. NIST also said it planned a virtual workshop to help stakeholders develop sector-specific crypto agility strategies. A second public draft followed on 17 July 2025.",[18,28,29],{},"NIST published a final version on 19 December 2025. NIST's record for the update, CSWP 39upd1, gives its date as 29 June 2026 and says it supersedes the 19 December 2025 final. The upd1 record is therefore the current publication, not the December final or the second public draft. It lists nine contributors from NIST, Vigil Security, Strativia and Trusted Cyber Annex, including Elaine Barker, Lily Chen, David Cooper and Dustin Moody, and covers cryptographic agility, algorithms, APIs, risk management and transition strategies.",[18,31,32],{},"The paper responds to the need to migrate algorithms because of quantum computing and other emerging threats, and it surveys trade-offs, challenges and operational mechanisms. It also fed the maturity-model thinking that practitioners use to assess crypto agility.",[18,34,35],{},"The paper speaks to security architects, product teams and standards bodies planning for algorithm change, and to federal agencies facing the 2026 migration deadlines.",[18,37,38,41],{},[21,39,40],{},"Why it matters."," Crypto agility determines how costly the next algorithm change will be, so this paper is a practical reference for architecture and procurement decisions. Executives should expect auditors and boards to ask whether critical systems can change algorithms without replacement. The guidance is a NIST white paper, not a mandate.",{"title":7,"searchDepth":43,"depth":43,"links":44},2,[45],{"id":15,"depth":43,"text":16},"Policy","2025-03-04","NIST's CSWP 39 explains how to replace cryptographic algorithms without disrupting systems. The 29 June 2026 update supersedes the December 2025 final.",false,"md",[52,55],{"q":53,"a":54},"Is the crypto agility paper a mandate?","No. It is a NIST white paper, not a mandate. It surveys trade-offs, challenges and operational mechanisms and serves as a practical reference for architecture and procurement decisions.",{"q":56,"a":57},"Which version of CSWP 39 should teams use?","Use CSWP 39upd1, dated 29 June 2026. NIST's record says it supersedes the 19 December 2025 final, so neither that final nor the second public draft is the current publication.",[59],"gaithersburg","\u002Fassets\u002Fog-default.png",[62,63],"Cross-Sector","Government Facilities",{},"2026-08-27",true,"\u002Fnews\u002Fnist-cswp-39-crypto-agility-guidance",[69,72],{"label":70,"url":71},"National Institute of Standards and Technology, \"Considerations for Achieving Crypto Agility: NIST Releases CSWP 39 for Public Comment,\" NIST CSRC, Mar. 4, 2025.","https:\u002F\u002Fcsrc.nist.gov\u002Fnews\u002F2025\u002Fnist-releases-cswp-39-for-public-comment",{"label":73,"url":74},"National Institute of Standards and Technology, \"CSWP 39upd1, Considerations for Achieving Crypto Agility: Strategies and Practices,\" NIST CSRC, Jun. 29, 2026.","https:\u002F\u002Fcsrc.nist.gov\u002Fpubs\u002Fcswp\u002F39\u002Fupd1\u002Fconsiderations-for-achieving-crypto-agility\u002Ffinal",[76,79],{"label":77,"url":78},"Crypto Agility: What It Is and How to Build It","\u002Fblog\u002Fcrypto-agility",{"label":80,"url":81},"Crypto Agility Infrastructure Isn't Optional Anymore","\u002Fblog\u002Fcrypto-agility-infrastructure-isnt-optional-anymore",{"title":5,"description":48},"NIST CSWP 39 Crypto Agility Guidance Updated 2026","nist-cswp-39-crypto-agility-guidance","news\u002Fnist-cswp-39-crypto-agility-guidance",[87,88,89,90],"crypto-agility","post-quantum cryptography","PQC migration","federal compliance","NIST's CSWP 39 explains how to replace cryptographic algorithms without disrupting systems, and the 29 June 2026 update supersedes the December 2025 final.","hRabtM4zXsVXTG9CI3wQxXvPUa76jEcmtF4l6P4vfAc",1792182886695]