Le NIST finalise l'IR 8547 : la cryptographie à clé publique vulnérable au quantique dépréciée après 2030, interdite après 2035

NIST has finalized the transition plan it first floated as a draft in November 2024. IR 8547 names the public key algorithms in today's FIPS and Special Publications that a large quantum computer would break, and attaches dates to them: deprecated after 2030, disallowed under NIST standards and guidelines after 2035. It recommends ML-KEM-768 as the default parameter set for key establishment and points to FIPS 203 as the priority for data that must stay confidential for a long time.

The report also ties itself to the US federal schedule. National Security Memorandum 10 keeps 2035 as the completion target, while Executive Order 14412 and OMB Memorandum M-26-15 require the most sensitive federal systems to adopt post-quantum key establishment by December 31, 2030 and post-quantum digital signatures by December 31, 2031, and to support TLS 1.3 no later than January 2, 2030. NIST frames the 2030 to 2035 window as the time organizations need to work through their full cryptographic supply chain, not only the systems they run themselves.

Our take

This is the document procurement teams will cite. Canada's ITSM.40.001 already points to the same end dates, and vendors selling into Canadian utilities, carriers and governments will now be measured against a final NIST schedule rather than a draft. The first question is still the same one: which of your devices and links are using RSA or elliptic curve key exchange today, and for how long does the traffic they carry need to stay private. You can't fix what you can't see. Start your Discovery Program this fall, budget in 2027, and be secured by January 2028.