NSA has moved its post-quantum deadline for National Security Systems to 2027, two years ahead of Cloudflare, Google and Microsoft, a dev.to post reports. That account is secondhand, so whether suppliers to those systems have to re-plan their migrations depends on what the agency's own statement says.
Reality
- Evidence15
- Adoption
- Insufficient
- Hype gap+55
- Incentives
- Insufficient
- Confidence30
Trail of Bits has published SequenceHash and SequenceMAC, open C2SP specs for hashing several inputs together with SHA-2, BLAKE or RIPEMD. Protocols that hash concatenated inputs into commitments or proofs now have a written fix that does not require Keccak.
Reality
- Evidence55
- Adoption
- Insufficient
- Hype gap+10
- Incentives35
- Confidence55
Hybrid ML-KEM is live on google.com and googleapis.com, and Cloud KMS post-quantum algorithms are generally available. The rest of the roadmap is a dated dependency schedule.
Reality
- Evidence60
- Adoption40
- Hype gap+10
- Incentives55
- Confidence65
Post-quantum standards were finalised in August 2024, and NIST means to phase out most quantum-vulnerable algorithms by 2035. For banks the harder problem is finding every place RSA and ECC are written into application code.
Reality
- Evidence46
- Adoption32
- Hype gap+24
- Incentives64
- Confidence50
A Forbes Tech Council argument for urgency leans on benchmarks that were never factoring runs. The part of it that survives scrutiny is still enough to justify the spend.
Reality
- Evidence38
- Adoption36
- Hype gap+42
- Incentives78
- Confidence48