NSA Guidance for Transition to Quantum-Resistant Cryptography
Transition timeline by system type (CNSA 2.0 advisory) – NSA Guidance for Transition to Quantum-Resistant Cryptography

NSA Guidance for Transition to Quantum-Resistant Cryptography T-METHOD: T-METHOD Profile-driven transition: new equipment meets CNSA 2.0 protection profiles, older equipment at its next update, prefer on availability, waiver for what is not refreshed

The advisory's general method: NIAP releases protection profiles requiring CNSA 2.0 support; all new equipment must meet those profile requirements and older equipment must meet them at its next update to remain NIAP compliant; CNSA 2.0 as the preferred configuration begins as soon as validated and tested solutions exist; NIAP profile requirements and NSM-10 technology refresh requirements determine when legacy algorithm support is removed; from then, legacy equipment and software not refreshed regularly needs a waiver and a plan to comply. Where feasible, NSS owners and operators are required to prefer CNSA 2.0 when configuring systems during the transition, and CNSA 2.0 will become mandatory in classes of commercial products within NSS, with other algorithms allowed only in specialised cases.

Maintained by Gerard BlokdykControl text last updated

Other controls in Transition timeline by system type (CNSA 2.0 advisory) – NSA Guidance for Transition to Quantum-Resistant Cryptography

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll NSA Guidance for Transition to Quantum-Resistant Cryptography controls