NIST taps PQShield to map global rules for quantum-safe algorithms The timeline for securing digital systems against quantum threats is surprisingly short, with national authorities now targeting 2030 for critical products and 2035 for standard ones. Once an academic exercise, post-quantum cryptography is rapidly becoming a practical necessity, yet implementation is proving complex. The landscape has dramatically shifted, creating regulatory differences as the US National Security Agency forbids hybrid cryptographic systems, directly contradicting the approach of European bodies like ANSSI in France and BSI in Germany, who mandate or strongly recommend them for backward compatibility. Regional Adoption of ML-KEM and ML-DSA Post-NIST Standardization National authorities are establishing distinct criteria for post-quantum cryptography (PQC) algorithm adoption, categorizing them as either globally or regionally specific to protocol system standards, creating challenges for product owners aiming for worldwide compliance. South Korea’s KCMVP certification program has not yet been updated with PQC algorithms, but anticipates the inclusion of ML-KEM and ML-DSA, alongside domestically selected KEMs NTRU+ and SMAUG-T, and signature algorithms AIMER and HAETAE, following a parallel development effort completed in January 2025. Germany’s Bundesamt für Sicherheit in der Informationstechnik (BSI) recommends utilizing traditional cryptographic algorithms in conjunction with all algorithms, including hash-based options, in hybrid post-quantum/traditional (PQ/T) configurations, a stance sharply contrasted by the US National Security Agency (NSA). The BSI TR-02102-1 document details recommended parameter sets for ML-KEM, ML-KEM-768 or ML-KEM-1024, and ML-DSA, ML-DSA-65 or ML-DSA-87, alongside specifications for other algorithms like Classic McEliece and FrodoKEM. While the BSI embraces a broad approach to PQC implementation, the NSA has no plans to incorporate SLH-DSA, FN-DSA, or HQC into its approved cryptographic suite, limiting LMS and XMSS to s
