NIST to Phase Out RSA-2048 and ECC 256 by 2030 in Quantum Security Push
As part of its post-quantum cryptography (PQC) initiative, NIST has announced significant changes to cryptographic standards. The draft proposal calls for the deprecation of RSA-2048 and ECC 256 by 2030, with complete disallowance by 2035.
Tim Callan headshot in collared shirt
Man wearing plaid shirt headshot
Key Points:
- NIST's draft focuses on transitioning away from current cryptographic standards
- RSA-2048 and ECC 256 will be deprecated by 2030
- Complete disallowance of these standards will take effect by 2035
- This is part of NIST's broader post-quantum cryptography initiative
- Organizations need to plan their cryptographic transitions accordingly
This timeline gives organizations approximately 6-7 years to transition their cryptographic systems to quantum-safe alternatives. The move reflects growing concerns about the vulnerability of current cryptographic standards to quantum computing threats.
These changes are critical for:
- Enterprise security teams
- Cryptography implementers
- Security architects
- Compliance officers
- IT infrastructure planners
Organizations should begin assessing their cryptographic infrastructure and planning for the transition to post-quantum cryptographic standards to ensure compliance with these new requirements.
Related Articles
Timing Attacks: The Hidden Threat to Post-Quantum Cryptography Security
