UK Cybersecurity Agency Sets 2035 Deadline for Post-Quantum Cryptography Transition

The National Cyber Security Centre outlines a phased roadmap to counter future quantum computing threats, emphasizing early preparation for critical infrastructure and sensitive data protection.

• The NCSC has released new guidance urging organizations to migrate to post-quantum cryptography (PQC) by 2035 to address future risks posed by quantum computing.
• A three-phase timeline has been established: defining migration goals by 2028, completing high-priority transitions by 2031, and achieving full migration by 2035.
• The guidance recommends adopting NIST-approved PQC algorithms, which were standardized last year, to ensure global alignment on post-quantum security measures.
• Challenges highlighted include legacy systems, financial costs, supply chain complexities, and a lack of in-house expertise for many organizations.
• The NCSC plans to launch a pilot scheme to assist organizations with PQC migration, including support for asset discovery, assessment, and planning.

3 Articles

The Guardian The Register BleepingComputer