NIST Releases Final IR 8547 Establishing Definitive Post-Quantum Cryptography Transition Timeline and Deprecation Schedules

The National Institute of Standards and Technology (NIST) has issued its final technical transition roadmap, NIST IR 8547: “Transition to Post-Quantum Cryptography Standards”. Authored by the Computer Security Division‘s leadership team—Dustin Moody, Ray Perlner, Andrew Regenscheid, Angela Robinson, and David Cooper—the milestone document provides federal agencies, commercial enterprises, and global standard-setting bodies with the official blueprint and deprecation timeline for phasing out classical public-key cryptography.

The report operationalizes the requirements of White House Executive Order 14412 and OMB Memorandum M-26-15. Under this policy framework, federal High Value Assets (HVAs) and high-impact systems face accelerated, binding deadlines: complete transition to post-quantum cryptography (PQC) for key establishment by December 31, 2030, and for digital signatures by December 31, 2031. Across the broader IT ecosystem, NIST officially confirms that classical, quantum-vulnerable public-key algorithms will be deprecated after 2030 and completely disallowed after 2035.

Addressing the Asymmetry of Cryptographic Threat Horizons

NIST IR 8547 anchors its urgency directly upon Mosca’s theorem and the persistent risk of “Harvest Now, Decrypt Later” (HNDL) attacks. Because adversarial intelligence agencies routinely siphon encrypted traffic from public networks with the intention of decrypting it once cryptanalytically relevant quantum computers (CRQCs) mature, data confidentiality requires immediate mitigation.