NIST’s PQC Standards: FIPS 203-205 and the Migration Clock

On August 13, 2024, NIST published the final versions of FIPS 203 (ML-KEM), FIPS 204 (ML-DSA), and FIPS 205 (SLH-DSA) — the first formal post-quantum cryptography standards, capping an eight-year open competition and starting the migration clock for RSA and elliptic-curve infrastructure. With harvest-now-decrypt-later collection already threatening long-lived secrets and federal migration timelines targeting the 2030s, enterprises face a decade-scale cryptographic inventory and replacement program. This guide walks the standards, the threat math, and the migration playbook from inventory to hybrid deployment.

Continue ReadingNIST’s PQC Standards: FIPS 203-205 and the Migration Clock

Post-Quantum Cryptography for Cyber Professionals

Post-quantum cryptography is no longer a research-only topic. With NIST's first PQC standards finalized and organizations facing long-term risks such as harvest-now, decrypt-later, cyber teams need to understand how PQC affects PKI, TLS, code signing, firmware trust, crypto agility, and migration planning. This guide explains what PQC is, where QKD fits, how hybrid deployments work, and what defenders should prioritize first.

Continue ReadingPost-Quantum Cryptography for Cyber Professionals