NIST finalizes IR 8547 timeline to phase out RSA and elliptic-curve cryptography
NIST has issued the final version of NIST IR 8547, "Transition to Post-Quantum Cryptography Standards," written by Dustin Moody, Ray Perlner, Andrew Regenscheid, Angela Robinson and David Cooper. According to the report, federal High Value Assets and high-impact systems must move to post-quantum key establishment by December 31, 2030, and to post-quantum digital signatures by December 31, 2031, under Executive Order 14412 and OMB Memorandum M-26-15. For the broader IT ecosystem, quantum-vulnerable public-key algorithms such as RSA, ECDH and ECDSA are to be deprecated after 2030 and disallowed after 2035. The document also says federal agencies should enforce TLS 1.3 by January 2, 2030, and that approved post-quantum and classical shared secrets can be combined in hybrid modes without invalidating FIPS 140 validation.