The Cybersecurity and Infrastructure Security Agency (CISA) recently released its initial list of product categories for technologies that use post-quantum cryptography standards.
The list identifies hardware and software categories that currently support or are expected to support-post quantum cryptography (PQC) standards and is intended to assist organizations in shaping PQC migration strategies and evaluating future technological investments. Technologies include cloud services, web software, networking hardware and software, and endpoint security.
“The advent of quantum computing poses a real and urgent threat to the confidentiality, integrity, and accessibility of sensitive data — especially systems that rely on public-key cryptography,” Madhu Gottumukkala, CISA acting director, said. “To stay ahead of these emerging risks, organizations must prioritize the procurement of PQC-capable technologies. This product categories list will support organizations making that critical transition. CISA is proud to deliver this resource in support of President (Donald) Trump’s executive order, helping organizations confront complex technical challenges and strengthen secure technology practices for the quantum era.”
Trump issued an executive order in June directing the Department of Homeland Security, acting through CISA, to publish a list of widely available products that support PQC.
CISA developed the list in close collaboration with the National Security Agency and will updated the list regularly.
