# NIST's New Quantum-Safe Road Map: What Must Change by 2030, 2031 and 2035?

> MKNIRALO — Technology — UNITED STATES / DIGITAL SECURITY STANDARDS

- Published: 2026-11-02
- Estimated reading time: 10 minutes
- Byline: Kai — Science Enthusiast
- Byline disclosure: Kai is a house editorial byline maintained by MKNIRALO, not a claim of an independently verified individual. It does not imply personal product testing or professional credentials.
- Author profile: https://mkniralo.com/authors/kai/
- Tags: NIST, Cybersecurity, Post-Quantum Cryptography, Quantum Computing, Digital Signatures, Standards, Encryption, United States
- Cover image: https://mkniralo.com/images/nist-post-quantum-transition-2026.svg

The final NIST IR 8547 maps a transition from quantum-vulnerable cryptography. Earlier deadlines target sensitive US federal systems; they do not mean today's internet encryption has already been broken by quantum computers.

The US National Institute of Standards and Technology published its final Transition to Post-Quantum Cryptography Standards report, NIST IR 8547, on 27 October 2026. It turns earlier standards into a migration road map for federal agencies, suppliers and operators of long-lived systems. The immediate task is inventorying and upgrading vulnerable public-key cryptography. NIST has not announced that a quantum computer is already breaking all existing encryption, nor are the 2030 and 2031 milestones universal deadlines for every private website.

## What is new about the October report?

NIST published its initial post-quantum algorithm standards in August 2024. IR 8547, finalised on 27 October 2026 after an earlier draft, is a transition plan identifying existing quantum-vulnerable uses and standards intended to replace them.

This distinction matters: publishing a cryptographic algorithm is not the same as completing migration across databases, devices, certificate systems, applications and vendor supply chains. The new document is concerned with the work of moving real systems.

Sources:
- [NIST IR 8547 quantum-resistant cryptography transition road map](https://www.nist.gov/news-events/news/2026/10/nist-report-provides-guidelines-transition-post-quantum-cryptography) — National Institute of Standards and Technology
- [Transition to Post-Quantum Cryptography Standards, published report](https://www.nist.gov/publications/transition-post-quantum-cryptography-standards) — NIST Publications
- [NISTIR 8547 final publication record](https://csrc.nist.gov/pubs/ir/8547/final) — NIST Computer Security Resource Center

## Why do 2030, 2031 and 2035 all appear?

NIST says a 2035 target was established for broad US federal migration. Executive Order 14412 prioritises federal high-value assets and high-impact systems for post-quantum key establishment by 2030 and digital signatures by 2031.

Those dates refer to specified US federal priorities and other applicable government requirements, not a claim that every consumer phone, university and overseas company must meet the same deadline. Contractors and regulated organisations may have additional obligations to assess.

Sources:
- [NIST IR 8547 quantum-resistant cryptography transition road map](https://www.nist.gov/news-events/news/2026/10/nist-report-provides-guidelines-transition-post-quantum-cryptography) — National Institute of Standards and Technology
- [Transition to Post-Quantum Cryptography Standards, published report](https://www.nist.gov/publications/transition-post-quantum-cryptography-standards) — NIST Publications

## The difference between key establishment and signatures

Key-establishment mechanisms help communicating systems derive shared secret material for protected exchanges. Digital signatures support authentication and integrity: they help recipients verify who approved a message or software update and whether it was altered.

NIST's approved post-quantum suite includes FIPS 203 for key encapsulation and FIPS 204 and FIPS 205 for digital signatures. A network may have to change several components, rather than replace one generic 'encryption button'.

Sources:
- [NIST IR 8547 quantum-resistant cryptography transition road map](https://www.nist.gov/news-events/news/2026/10/nist-report-provides-guidelines-transition-post-quantum-cryptography) — National Institute of Standards and Technology
- [Post-Quantum Cryptography overview and ready standards](https://www.nist.gov/pqc) — NIST
- [NIST IR 8547 CSRC release notice](https://csrc.nist.gov/News/2026/transition-to-pqc-standards-nist-ir-8547) — NIST Computer Security Resource Center

## What 'harvest now, decrypt later' really means

Sensitive traffic can be copied and stored today. If a powerful cryptanalytically relevant quantum computer is eventually built, an attacker might then use it against information protected with vulnerable public-key mechanisms.

The risk is particularly important when confidentiality must last many years. It is a reason to plan ahead, not evidence that quantum attackers can currently decrypt every captured message on demand.

Sources:
- [NIST IR 8547 quantum-resistant cryptography transition road map](https://www.nist.gov/news-events/news/2026/10/nist-report-provides-guidelines-transition-post-quantum-cryptography) — National Institute of Standards and Technology
- [Post-Quantum Cryptography overview and ready standards](https://www.nist.gov/pqc) — NIST

## What is the role of hybrid approaches?

NIST discusses hybrid arrangements that use conventional and post-quantum techniques together, providing a transition strategy while organisations gain operational confidence. This can be conservative but introduces performance, engineering and integration overhead.

Which components to migrate first depends on a threat model, data lifetime, vendor dependencies and the ability to change algorithms later. 'Quantum-safe' labels alone do not establish that a deployment is correctly configured or audited.

Sources:
- [NIST IR 8547 quantum-resistant cryptography transition road map](https://www.nist.gov/news-events/news/2026/10/nist-report-provides-guidelines-transition-post-quantum-cryptography) — National Institute of Standards and Technology
- [Transition to Post-Quantum Cryptography Standards, published report](https://www.nist.gov/publications/transition-post-quantum-cryptography-standards) — NIST Publications
- [NIST IR 8547 CSRC release notice](https://csrc.nist.gov/News/2026/transition-to-pqc-standards-nist-ir-8547) — NIST Computer Security Resource Center

## What an organisation can verify next

A useful first step is a cryptographic inventory: identify protocols, certificates, keys, signing services, supplier products and long-lived data. Then map exposure and dependencies against the published NIST standards and policies that apply to that organisation.

The new report is an authoritative planning milestone. Actual protection depends on implementation, testing, key-management practices and maintenance—not merely citing a compliance date.

Sources:
- [NIST IR 8547 quantum-resistant cryptography transition road map](https://www.nist.gov/news-events/news/2026/10/nist-report-provides-guidelines-transition-post-quantum-cryptography) — National Institute of Standards and Technology
- [NISTIR 8547 final publication record](https://csrc.nist.gov/pubs/ir/8547/final) — NIST Computer Security Resource Center
- [Post-Quantum Cryptography overview and ready standards](https://www.nist.gov/pqc) — NIST

## About this article

This article reflects the public sources available on the publication and update dates shown above. For developing stories, follow the linked source pages for subsequent statements or decisions.

## Sources and further reading

- [NIST IR 8547 quantum-resistant cryptography transition road map](https://www.nist.gov/news-events/news/2026/10/nist-report-provides-guidelines-transition-post-quantum-cryptography) — National Institute of Standards and Technology (published 2026-10-27) (accessed 2026-11-02)
- [Transition to Post-Quantum Cryptography Standards, published report](https://www.nist.gov/publications/transition-post-quantum-cryptography-standards) — NIST Publications (published 2026-10-27) (accessed 2026-11-02)
- [NISTIR 8547 final publication record](https://csrc.nist.gov/pubs/ir/8547/final) — NIST Computer Security Resource Center (published 2026-10-27) (accessed 2026-11-02)
- [Post-Quantum Cryptography overview and ready standards](https://www.nist.gov/pqc) — NIST (accessed 2026-11-02)
- [NIST IR 8547 CSRC release notice](https://csrc.nist.gov/News/2026/transition-to-pqc-standards-nist-ir-8547) — NIST Computer Security Resource Center (published 2026-10-27) (accessed 2026-11-02)