GAITHERSBURG, Md. — Following a grueling six-year international competition, the National Institute of Standards and Technology has chosen the first four post-quantum cryptographic algorithms, setting the stage for the most extensive re-encryption of global digital infrastructure in history.
GAITHERSBURG, Md. — In a watershed announcement for information security, the National Institute of Standards and Technology unveiled the winning mathematical algorithms designed to withstand attacks from future cryptanalytically relevant quantum computers (CRQCs).
Modern internet security—from online banking and e-commerce to military command-and-control links and encrypted government databases—relies fundamentally on public-key cryptography such as RSA and Elliptic Curve Cryptography. These systems depend on mathematical problems, such as factoring large prime numbers, that are virtually impossible for classical computers to solve in a reasonable timeframe. However, Shor’s algorithm, running on a sufficiently powerful quantum computer, could shatter these encryption schemes in mere minutes.
The Winning Mathematical Algorithms
NIST selected four core algorithms from an initial pool of 82 candidate submissions evaluated by mathematicians worldwide:
- CRYSTALS-Kyber: Selected as the primary standard for general public-key encryption and key encapsulation, securing web browsing sessions, TLS handshakes, and virtual private network connections.
- CRYSTALS-Dilithium: Selected as the primary standard for digital signatures, securing software update verification, digital certificates, and secure electronic documents.
- FALCON: A secondary digital signature algorithm tailored for specialized applications requiring compact signature sizes.
- SPHINCS+: A stateless hash-based signature algorithm that serves as a hedge, relying on completely different mathematics in the event that lattice-based systems develop unexpected theoretical weaknesses.
The Imminent Threat of ‘Harvest Now, Decrypt Later’
Although functional quantum computers capable of breaking RSA are still estimated to be a decade away, national security officials emphasize that the threat is immediate. Adversary intelligence services are actively intercepting and storing vast petabytes of encrypted U.S. government communications, diplomatic cables, and proprietary defense blueprints today, with the explicit intention of decrypting them the moment quantum hardware becomes available.
The White House has directed federal agencies to begin cataloging their public-key cryptographic assets immediately under National Security Memorandum 10 (NSM-10). NIST will publish finalized Federal Information Processing Standards (FIPS) by 2024, initiating a mandatory decade-long migration across both public and private sector networks.