Hi All
For US government agencies, the release of post-quantum standards triggers clauses within NSM-10.
Deprecation timelines are due in 90 days:
"Within 90 days of the release of the first set of NIST standards for quantum-resistant cryptography... the Secretary of Commerce, through the Director of NIST, shall release a proposed timeline for the deprecation of quantum-vulnerable cryptography in standards, with the goal of moving the maximum number of systems off quantum-vulnerable cryptography within a decade of the publication of the initial set of standards."
Purchasing of solutions is also unlocked:
"Until the release of the first set of NIST standards for quantum-resistant cryptography referenced in subsection 3(a) of this memorandum, the heads of FCEB Agencies shall not procure any commercial quantum-resistant cryptographic solutions for use in IT systems supporting enterprise and mission operations."
https://www.whitehouse.gov/briefing-room/statements-releases/2022/05/04/national-security-memorandum...
Regards
Caute_Cautim
