![DR Technology Logo DR Technology Logo](https://eu-images.contentstack.com/v3/assets/blt6d90778a997de1cd/blt4c091cd3ac9935ea/653a71456ad0f6040a6f71bd/Dark_Reading_Logo_Technology_0.png?width=700&auto=webp&quality=80&disable=upscale)
News, news analysis, and commentary on the latest trends in cybersecurity technology.
NIST Finalizes Post-Quantum Encryption Standards
The new standards are designed for two tasks: general encryption and digital signatures.
August 13, 2024
![theoretical image of a quantum chip theoretical image of a quantum chip](https://eu-images.contentstack.com/v3/assets/blt6d90778a997de1cd/blt45e01cece175311e/66b110ef99932118ba8785a4/Quantum(1800)_Science_Photo_Library_Alamy.jpg?width=1280&auto=webp&quality=95&format=jpg&disable=upscale)
Three new encryption algorithms to bolster global cybersecurity efforts against future attacks using quantum technologies were published today by the National Institute of Standards and Technology (NIST), a division of the U.S. Department of Commerce. The new standards are designed for two tasks: general encryption and digital signatures.
The standards are the culmination of an eight-year effort from the agency to tap the best minds in cybersecurity to devise the next generation of cryptography strong enough to withstand quantum computers. Experts expect quantum computers capable of breaking current current cryptographic algorithms within a decade. The new standards, the first released by NIST’s post-quantum cryptography (PQC) standardization project, are published on the department's website. The documents contain the algorithms' computer code, instructions for how to implement them in products and in encryption systems, and use cases for each.
FIPS 203 is a key-encapsulation mechanism encryption algorithm to project information transferred over a public network and is "intended as the primary standard for general encryption," the agency said. It is based on the CRYSTALS-Kyber algorithm, renamed as the Module-Lattice-Based Key-Encapsulation Mechanism (ML-KEM).
FIPS 204 is the primary standard for protecting digital signatures. It uses the CRYSTALS-Dilithium algorithm, now called the Module-Lattice-Based Digital Signature Algorithm (ML-DSA).
FIPS 205 is also designed for digital signatures. It leverages a different mathematical approach than ML-DSA and is intended to be used as a backup when that algorithm proves vulnerable. The standard employs the Sphincs+ algorithm, now known as the Stateless Hash-Based Digital Signature Algorithm (SLH-DSA).
NIST mathematician Dustin Moody, head of the PQC standardization project, said the agency is continuing to evaluate two additional algorithms to use as backup standards but urges security practitioners to use those released today.
"There is no need to wait for future standards," he said. "Go ahead and start using these three. We need to be prepared in case of an attack that defeats the algorithms in these three standards, and we will continue working on backup plans to keep our data safe. But for most applications, these new standards are the main event."
About the Author
You May Also Like
State of AI in Cybersecurity: Beyond the Hype
October 30, 2024[Virtual Event] The Essential Guide to Cloud Management
October 17, 2024Black Hat Europe - December 9-12 - Learn More
December 10, 2024SecTor - Canada's IT Security Conference Oct 22-24 - Learn More
October 22, 2024