New NIST Standards Require Companies to Transition to Post-Quantum Cryptography

In August 2024, the US National Institute of Standards and Technology (NIST) released the first official set of post-quantum cryptography standards, which are algorithms designed by mathematicians to remain secure even against quantum computers capable of breaking current encryption systems like RSA and ECC.

The danger lies in what is known as "Harvest Now, Decrypt Later," a technique in which adversaries collect encrypted data today to decrypt it later once quantum computers capable of doing so become available, meaning that sensitive data sent today could be at real risk a decade from now.

US government agencies such as the NSA announced timelines for a full transition to quantum cryptography by 2035, while major financial institutions and telecom companies took the initiative to adopt the NIST-recommended CRYSTALS-Kyber algorithm to protect key exchange channels.

Cybersecurity experts warn that the transition to post-quantum cryptography could take years of complex technical work, urging governments and financial institutions to start immediately to avoid a comprehensive security crisis when quantum computers become a commercial reality.

What do these terms mean?

Post-Quantum Cryptography: Encryption algorithms designed to remain secure even against quantum computers, relying on mathematical problems different from traditional encryption that are difficult to solve even with quantum computing.

Quantum Computers: Computers that use principles of quantum mechanics such as "superposition" and "entanglement" to perform computational operations at speeds surpassing classical computers in specific problems like decryption.

CRYSTALS-Kyber Algorithm: One of the post-quantum cryptography algorithms selected by NIST as an official standard for key exchange, which is gradually entering secure communication protocols like TLS.