NSM-10 US Government Notice

Caute_cautim — Tue, 13 Aug 2024 21:35:44 GMT

Hi All

For US government agencies, the release of post-quantum standards triggers clauses within NSM-10.

Deprecation timelines are due in 90 days:

"Within 90 days of the release of the first set of NIST standards for quantum-resistant cryptography... the Secretary of Commerce, through the Director of NIST, shall release a proposed timeline for the deprecation of quantum-vulnerable cryptography in standards, with the goal of moving the maximum number of systems off quantum-vulnerable cryptography within a decade of the publication of the initial set of standards."

Purchasing of solutions is also unlocked:

"Until the release of the first set of NIST standards for quantum-resistant cryptography referenced in subsection 3(a) of this memorandum, the heads of FCEB Agencies shall not procure any commercial quantum-resistant cryptographic solutions for use in IT systems supporting enterprise and mission operations."

https://www.whitehouse.gov/briefing-room/statements-releases/2022/05/04/national-security-memorandum-on-promoting-united-states-leadership-in-quantum-computing-while-mitigating-risks-to-vulnerable-cryptographic-systems/

Regards

Caute_Cautim

topic NSM-10 US Government Notice in Industry News

NSM-10 US Government Notice