Post-Quantum Cryptography Standards Actually Finalized: Now What?

[MiguelCardozo]

NIST published final post-quantum cryptographic standards. The decision is made. Organizations can now implement knowing NIST validated the math. That's important. Standards give permission to move forward. But implementation is where it gets hard. Updating systems to use new crypto standards requires software changes hardware testing legal review. The timeline from standard to deployment is measured in years not months. NIST did their part. Now enterprises need to do theirs. The standard being finalized is actually the easy part of the problem.

FIPS 203, Module-Lattice-Based Key-Encapsulation Mechanism Standard | CSRCcsrc.nist.gov

[ProperMadlad20]

NIST standards matter because they reduce risk of choosing wrong crypto. Now enterprises can't complain standards don't exist