Transitioning National Security Systems to a Post Quantum Future
summary
National Security Systems adopt the final cnsa 2.0 suite and a concrete timeline: new NSS acquisitions must be QR-capable starting 2027, systems must be upgradeable by 2030 and have quantum resistance enabled by end of 2031, and aim to be off quantum‑vulnerable crypto by 2035. Chosen primitives include mlkem1024 for key agreement, MLD DSA 87 and LMS/XMSS for signatures, AES/SHA2 retained with larger parameters, and rollout requires quantum-resistant certificate authorities, NAA lab validation, and likely hardware replacement for noncompliant devices.
AI-written summary · about
chapters (15)
- 0:00Welcome
- 1:04Speaker introduction
- 2:09NSA cryptography role
- 3:16Diversity of systems
- 6:11NSM 10 and CNSS 2.0
- 8:19CNSS 2.0 cryptographic suite
- 10:47Selecting CNSS 2.0 algorithms
- 13:34Quantum-resistant timeline
- 15:19Quantum-resistant signatures
- 16:24ML-KEM 1024 and ML-DSA 87
- 17:27Quantum-resistant certificate authorities
- 18:29Hybrid cryptographic systems
- 21:44PKI transitions
- 24:16Post-quantum takeaways
- 25:00Q&A
related talks
13mNavigating the Quantum Readiness Journey: Open-Source Cryptography, PKI and Signing Tools
26mPreparing the United States for Post Quantum Cryptography
32mCybersecurity in Post Quantum Era
25mANSSI plan for post quantum transition
46mAchieving Quantum Readiness: A Comprehensive Approach
53mPanel: Migrating to Post-Quantum Schemes
22mPost Quantum Policy and Roadmap of the BSI
20mCryptographic Resilience in the Quantum Era