UK Cybersecurity Agency Sets 2035 Deadline for Post-Quantum Cryptography Transition
The National Cyber Security Centre outlines a phased roadmap to counter future quantum computing threats, emphasizing early preparation for critical infrastructure and sensitive data protection.
- The NCSC has released new guidance urging organizations to migrate to post-quantum cryptography (PQC) by 2035 to address future risks posed by quantum computing.
- A three-phase timeline has been established: defining migration goals by 2028, completing high-priority transitions by 2031, and achieving full migration by 2035.
- The guidance recommends adopting NIST-approved PQC algorithms, which were standardized last year, to ensure global alignment on post-quantum security measures.
- Challenges highlighted include legacy systems, financial costs, supply chain complexities, and a lack of in-house expertise for many organizations.
- The NCSC plans to launch a pilot scheme to assist organizations with PQC migration, including support for asset discovery, assessment, and planning.