UK Cyber Agency Sets 2035 Deadline for Post-Quantum Cryptography Migration to Protect Critical Infrastructure

The UK's National Cyber Security Centre (NCSC) urges critical infrastructure operators to adopt post-quantum cryptography by 2035. * The NCSC released a three-step migration guidance targeting technical decision-makers and risk owners of large organizations. * Organizations should assess IT systems and prepare a migration plan by 2028. * High-priority systems should switch to post-quantum encryption by 2031. * Complete overall migration by 2035. * Migration should build broader cyber resilience. * The U.S. National Institute of Standards and Technology (NIST) finalized three post-quantum encryption algorithms in August 2024. * Google and Microsoft plan to integrate post-quantum capabilities. * Replacing web public key infrastructure and industrial control system protocols will be challenging. * Systems relying on RSA and ECC cryptographic algorithms will struggle to integrate new algorithms, requiring a significant overhaul.

Did you find an error or inaccuracy?

We will consider your comments as soon as possible.