NSA to Develop Post-Quantum Cryptography Resources for National Security Systems

• New commercial NSS must support quantum-resistant algorithms starting in 2027
• Legacy systems that cannot run quantum-resistant algorithms face phaseout by 2030
• NSA warns of “harvest now, decrypt later” tactics targeting encrypted information

The National Security Agency is developing post-quantum cryptography resources designed to protect national security systems, dubbed NSS, during the transition to algorithms that can withstand quantum computing threats.

NSA said Thursday the effort, which aligns with Executive Order 14412, “Securing the Nation Against Advanced Cryptographic Attacks,” also covers the Department of War and the defense industrial base.

What Are the New Quantum Security Requirements?

The Committee on National Security Systems Policy 15 requires all new commercial NSS to support quantum-resistant algorithms beginning in 2027. By 2030, legacy systems unable to run them will be phased out.

The agency warned that threat actors have already adopted “harvest now, decrypt later” tactics, gathering encrypted data in expectation that quantum computers will one day be able to break it. According to the NSA, existing architectures also need protection against “trust now, exploit later” threats posed by quantum computing.