Skip to content
OMB M-26-15 requires federal agencies to support TLS 1.3 by January 2, 2030 and moves quantum-resistant key establishment for high-sensitivity systems to the end of 2030. This article covers what that means...
The EU Network Code on Cybersecurity does not name encryption algorithms. Your encryption obligations come from its risk assessments and controls, which run on a timeline that overlaps with the EU's end-2030...
TSA's pipeline directives require outcomes, not specific algorithms. This article covers SD Pipeline-2021-02, API 1164, NIST IR 8547 and adding quantum-safe gateways to SCADA links without disrupting operations.
A practical guide to water utility post-quantum cryptography: which SCADA and telemetry links to protect first, what AWIA Section 2013 and NIS2 Article 21 expect, and how small utilities can stage the...
This guide covers what Singapore's Quantum-Safe Handbook asks of critical information infrastructure owners, the algorithms South Korea chose in KpqC, Japan's 2035 target, and how multinational OT operators can line all of...
The proposed NIS2 amendment would require each Member State to adopt a PQC migration policy aligned with EU milestones: 2030 for critical use cases, 2035 for the rest. Here is what that...
NERC CIP-012 and CIP-005 do not name any algorithms, but NIST IR 8547 sets dates for retiring RSA and ECC. This article covers what utilities should change in their CIP-012 plans, remote...
In September 2026 the G7 Cybersecurity Working Group and CISA published a call to action on post-quantum cryptography. This article covers what it says, what it means for OT and critical infrastructure...
NIST released the SP 800-82r4 initial public draft on September 21, 2026. This article explains its data-security and cryptography guidance for OT, IIoT and cloud convergence, the comment process, and how it...
OT equipment bought today may still run in 2045. This guide sets out the post-quantum requirements to write into tenders and contracts: algorithms, crypto-agility, CRA support periods, IEC 62443 references and update...
The ECCG Agreed Cryptographic Mechanisms list sets the EU baseline for state-of-the-art cryptography. This article explains its post-quantum rules, how hybrid key exchange fits in, and what that means when buying VPN...
NIST IR 8547 proposes deprecating 112-bit RSA and ECC after 2030 and disallowing all quantum-vulnerable public-key algorithms after 2035. Here is what that means for VPNs, hybrid ML-KEM and OT devices.
Australia expects traditional asymmetric cryptography to stop being used by the end of 2030. Canada's ITSM.40.001 sets 2026, 2031 and 2035 milestones. This article compares both with EU, UK and US timelines...
The CRA does not name post-quantum algorithms, but it does require state-of-the-art encryption and security updates over a product's support period. This article explains how that fits with NIS2, the EU PQC...
The NCSC's March 2025 guidance sets three post-quantum milestones: 2028, 2031 and 2035. This article explains what each one requires, how hybrid key exchange fits in, and how the UK dates compare...
CISA's post-quantum product categories list sorts IT products into 'widely available' and 'transitioning' groups. This guide covers what the list includes, what it leaves out (OT, IoT), and how critical infrastructure buyers...
NSA CNSA 2.0 requires VPNs and routers in National Security Systems to support and prefer quantum-resistant algorithms by 2026 and use them exclusively by 2030. This article explains what that means for...
The EU Coordinated Implementation Roadmap for PQC sets three milestones: start by end-2026, protect high-risk use cases by end-2030, and migrate as many remaining systems as feasible by 2035. Here is what...
There isn't one post quantum cryptography deadline. There are several: the EU expects high-risk and critical infrastructure use cases to migrate by end 2030, and NIST plans to disallow RSA and ECC...
Utilities and pipeline operators have to protect control center, substation, cloud and remote access links against future quantum decryption. This article covers what regulators require today and how to design hybrid post-quantum...