The NSA says new commercial National Security Systems (NSS) must be capable of supporting quantum-resistant algorithms starting in 2027, while legacy NSS that cannot support them are to be phased out by 2030. Those milestones apply to NSS—not to every commercial product or company. A separate 2026 executive order sets later, function-specific deadlines for certain federal systems outside NSS.
What the NSA announced—and who the dates cover
In an October 1, 2026 announcement, the NSA described new implementation milestones under Committee on National Security Systems Policy 15, or CNSS Policy 15. The policy concerns cryptographic protections for National Security Systems. The NSA’s announcement says new commercial NSS must be capable of supporting quantum-resistant algorithms beginning in 2027, and legacy systems that cannot support them are to be phased out by 2030.
As an Amazon Associate I earn from qualifying purchases.
These are not universal deadlines for all commercial technology. “Commercial” describes the systems involved; the scope remains NSS. Whether a requirement applies to a particular organization or product depends on its role and the system in which it is used. Morgan Stern, the NSA’s Effort Lead for Quantum Resistance, said the agency is working with academia and industry on standards, guidance, education, and integration of advanced algorithms.
The NSA’s milestone is about capability for new systems and a phase-out target for unsupported legacy systems. It should not be read as a claim that every covered system must have completed its entire transition by 2027.
#1 Best Overall
How the broader federal deadlines differ
Executive Order 14412, signed June 22, 2026, establishes a separate schedule for federal high-value assets and high-impact systems that are not NSS. It distinguishes key establishment—the cryptographic process used to establish shared keys—from digital signatures, which help verify authenticity and integrity.
| System scope | Cryptographic function or milestone | Date | Authority and qualification |
|---|---|---|---|
| New commercial National Security Systems | Must be capable of supporting quantum-resistant algorithms | Starting in 2027 | NSA announcement under CNSS Policy 15; limited to NSS |
| Legacy NSS unable to support quantum-resistant algorithms | Phase-out | By 2030 | NSA announcement under CNSS Policy 15 |
| Federal high-value assets and high-impact systems outside NSS | Transition to PQC for key establishment | By December 31, 2030 | Executive Order 14412 |
| Federal high-value assets and high-impact systems outside NSS | Transition to PQC for digital signatures | By December 31, 2031 | Executive Order 14412 |
The executive order also assigns federal migration-planning and coordination responsibilities, calls for technical guidance and validation-related work, and directs support for critical-infrastructure owners and operators. It calls for a proposed contractor rule; that is not the same as a finalized rule. The order does not make every company directly subject to the federal-system deadlines listed above.
Rank #2
What post-quantum cryptography is—and why migration is starting now
Post-quantum cryptography (PQC) refers to cryptographic algorithms designed to resist attacks from both conventional computers and future quantum computers. The concern is prospective: NSA and NIST describe the possibility that sufficiently capable quantum computing could undermine some cryptography in use today. The cited announcements do not establish that a quantum computer can currently decrypt deployed encryption.
Do these 3 things before closing this tab:
1Scan for outdated or missing drivers - takes under a minute2Clear out junk files and repair common Windows errors3Fix the driver behind crashes, sound loss and screen glitches“Harvest now, decrypt later” and long-lived secrets
In a “harvest now, decrypt later” scenario, an attacker collects encrypted information now and retains it in the hope that future capabilities will make it readable. That possibility makes the required secrecy lifetime important: data that must remain confidential for years or decades may need earlier attention than information whose sensitivity expires quickly. The scenario is a risk described by the NSA, not evidence that collected data has already been decrypted.
Authentication, signatures, and certificates
Confidentiality is not the only concern. The NSA also discusses “trust now, forge later” risks involving authentication, digital signatures, and certificates. Digital signatures support checks that a message, software update, or identity credential is authentic and has not been altered. NIST’s PQC transition includes digital-signature standards, which is why the federal schedule treats signatures separately from key establishment.
Which standards are ready, and what changed with HAWK?
NIST says three PQC standards are finalized and ready to implement. Its overview distinguishes these standards from algorithms still being evaluated. NIST also reports that HQC was selected as a fifth algorithm for post-quantum encryption in March 2025; that selection does not change the count of three finalized standards.
Rank #4
NIST’s overview says a July 28, 2026 vulnerability finding involving HAWK concerned an algorithm still under consideration, which was subsequently withdrawn. NIST says the finding did not affect finalized standards such as ML-KEM and ML-DSA. The distinction matters: a finding about a candidate should not be presented as evidence that the finalized standards are affected.
The Tool Desk
Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Standards are only one part of deployment. NIST says products, services, and protocols will need updates, and notes that standards are used in commercial technologies while groups including the IETF are incorporating PQC into protocols such as TLS. The NSA describes the overall transition as one of the largest and most complex migrations in computing history.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.How organizations can prepare for a PQC transition
Joint NSA, CISA, and NIST guidance recommends starting with readiness planning, discovery, prioritization, and vendor engagement. A practical sequence is:
- Assign ownership and set a roadmap. Name accountable teams and establish a readiness plan that can be updated as technical guidance and implementation details evolve.
- Inventory cryptographic assets and dependencies. Identify systems, algorithms, protocols, products, services, and vendor dependencies that use cryptography. Record where cryptography protects data, establishes keys, or supports authentication and signatures.
- Prioritize according to risk and criticality. Consider data sensitivity, how long confidentiality must last, system criticality, and dependencies that could delay migration. The guidance calls for prioritization but does not prescribe one universal scoring formula.
- Ask vendors for documented plans. Request PQC roadmaps, compatibility information, and explanations of how relevant products, services, and protocols will be updated.
- Map each system to the right rules and dates. Track NSS requirements separately from the executive order’s deadlines for non-NSS federal high-value assets and high-impact systems. Monitor contractor requirements as proposed or finalized, along with any sector-specific guidance.
- Follow authoritative technical updates. Use current NIST and agency guidance to inform algorithm and implementation choices rather than assuming that a candidate, a finalized standard, and a deployed product are interchangeable.
Rob Joyce, then Director of NSA Cybersecurity, said in the agency’s August 21, 2023 announcement of joint-agency guidance that the transition would require sustained government-industry collaboration and that organizations should begin rather than wait until the last minute.
What is still not quantified
The cited agency materials do not quantify migration costs, measured performance effects, or the proportion of industry that has adopted PQC. Organizations therefore should not treat a general cost estimate or performance claim as established by these policy announcements. Actual effects depend on the systems, products, and implementation choices involved.
Recommended Free Tools
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
