The Project 25 Technology Interest Group is pleased to share a link to recent guidance from DHS CISA on risk mitigation to aid in post-quantum cryptography (PQC) adoption.
Product Categories for Technologies That Use Post-Quantum Cryptography Standards
A link to the full report is below:
Excerpt from report Introduction
“In response to the June 6, 2025, Executive Order (EO) 14306, “Sustaining Select Efforts to Strengthen the Nation’s Cybersecurity and Amending Executive Order 13694 and Executive Order 14144,” the Cybersecurity and Infrastructure Security Agency (CISA) is providing and regularly updating lists to aid in post-quantum cryptography (PQC) adoption. The lists include hardware and software categories with example types of widely available products that use PQC standards to protect sensitive information.1 The lists focus on categories of available products, typically acquired by the federal government, that utilize cryptographic algorithms. Because PQC-capable products are widely available in the listed categories, organizations should acquire only PQC-capable products when planning acquisitions and procuring products in these categories”.
.jpg)
