FIPS 203
ML-KEM
Module-lattice-based key-encapsulation mechanism. A foundation for establishing shared secrets in post-quantum protocols.
Final · 13 August 2024
Official NIST source (opens in a new tab)CyneraNIST Standards
NIST Standards
A clear distinction.
Final. Draft. In development.
Understand what has been standardised, what supports implementation and what still belongs on the watchlist.
Reference library
The foundations for
technical decisions.
Standards define algorithms. Secure deployment still requires suitable protocols, implementation assurance and operational design.
FIPS 204
ML-DSA
Module-lattice-based digital signatures for authenticity and integrity. Deployment also depends on protocol and product support.
Final · 13 August 2024
Official NIST source (opens in a new tab)FIPS 205
SLH-DSA
Stateless hash-based digital signatures. A different cryptographic foundation with its own size and performance trade-offs.
Final · 13 August 2024
Official NIST source (opens in a new tab)SP 800-227
Key-encapsulation mechanisms
Recommendations for the use and implementation of key-encapsulation mechanisms. Relevant to turning a primitive into a sound system design.
Final · 18 September 2025
Official NIST source (opens in a new tab)CSWP 39 upd. 1
Achieving crypto agility
Considerations for changing cryptography across systems and organisations. The updated publication supersedes the original CSWP 39.
Original final · 19 December 2025
Updated · 29 June 2026
Official NIST source (opens in a new tab)Updated · 29 June 2026
NIST IR 8547
Transition to PQC standards
A proposed approach to transitioning from quantum-vulnerable algorithms. Draft milestones are not final standards or universal deadlines.
Initial public draft · 12 November 2024
Official NIST source (opens in a new tab)FIPS 206
FN-DSA / Falcon-derived signatures
A further signature standard in development. Do not describe selection for standardisation as a published final FIPS.
Status reviewed · 19 October 2026
Official NIST source (opens in a new tab)HQC
Additional key encapsulation
Selected for standardisation to diversify the PQC portfolio. Selection is a milestone, not a final approved implementation standard.
Selection announced · 11 March 2025
Official NIST source (opens in a new tab)Reference review · 19 October 2026Selected references, not an exhaustive register. Official sources remain authoritative.
From standard to system
An algorithm is
only the beginning.
A published PQC standard does not, by itself, make a product quantum-safe. The surrounding protocol, random-number generation, key management, negotiation and implementation all matter.
- Select: choose algorithms and parameter sets appropriate to the use case and applicable requirements.
- Integrate: understand protocol support, certificates, message sizes, latency and existing dependencies.
- Validate: test interoperability, downgrade resistance and operational behaviour.
- Govern: record decisions, exceptions, evidence and a route for future cryptographic change.
Important distinction: use of a NIST-standardised algorithm is not the same as a FIPS-validated cryptographic module. Validation and certification claims require separate, verifiable evidence.
Check the live NIST publication register (opens in a new tab)Start a conversation
Make your next move
quantum-ready.
Start with a clear view of your cryptographic exposure. Build a transition you can govern, fund and deliver.