NSA Guidance for Transition to Quantum-Resistant Cryptography

Transition timeline by system type (CNSA 2.0 advisory) – NSA Guidance for Transition to Quantum-Resistant Cryptography

NSA Guidance for Transition to Quantum-Resistant Cryptography T-OS: T-OS Operating systems: support and prefer CNSA 2.0 by 2027, exclusive use by 2033

Operating systems used in NSS must support and prefer CNSA 2.0 by 2027 and use it exclusively by 2033. The CSfC addendum places IPsec clients, WLAN clients, file encryption and software and hardware full disk encryption in the operating-system class.

Maintained by Gerard BlokdykControl text last updated 21 May 2026

Other controls in Transition timeline by system type (CNSA 2.0 advisory) – NSA Guidance for Transition to Quantum-Resistant Cryptography

T-LEGACY T-LEGACY Custom applications and legacy equipment: update or replace by 2033
T-METHOD T-METHOD Profile-driven transition: new equipment meets CNSA 2.0 protection profiles, older equipment at its next update, prefer on availability, waiver for what is not refreshed
T-NET T-NET Traditional networking equipment such as VPNs and routers: support and prefer by 2026, exclusive use by 2030
T-NICHE T-NICHE Niche equipment such as constrained devices and large PKI systems: support and prefer by 2030, exclusive use by 2033
T-SIGN T-SIGN Software and firmware signing: transition now, CNSA 2.0 for new code by 2025, exclusive use by 2030
T-WEB T-WEB Web browsers, web servers and cloud services: support and prefer CNSA 2.0 by 2025, exclusive use by 2033

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All NSA Guidance for Transition to Quantum-Resistant Cryptography controls