NSA sets 2027 and 2030 quantum-resistance milestones

The US National Security Agency announced new post-quantum cryptography migration measures on October 1. Under national-security-systems policy, all new commercial NSS must support quantum-resistant algorithms from 2027, while legacy systems that cannot migrate are to be phased out by 2030. NSA frames the risk as both 'harvest now, decrypt later' and 'trust now, exploit later,' covering long-lived sensitive data, authentication and critical systems. The operating work is broader than swapping algorithms: inventory cryptographic assets, verify hardware and protocol upgrade paths, update supplier requirements, design hybrid migration and sequence retirements. The date when quantum machines can break today's public-key systems remains uncertain, but the exposure window for long-lived data has already started.