[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fwpbZ5y8FLU80OEuM3G498m3gHBRn5BZyneIkFPHTHns":3},{"lesson":4},{"id":5,"slug":6,"article_id":7,"title":8,"body":9,"prevention":10,"framework_refs":11,"framework_notes":22,"status":23,"created_at":24,"published_at":25,"article":26,"tags":30,"podcasts":49,"controls":50},"6c30d09a-be1c-4a81-a2e3-24a328e1a42a","microsoft-accelerates-quantum-safe-cryptography-transition-to-2029","cf73967d-706f-41e8-9c6d-b8c90b362848","Microsoft Accelerates Quantum-Safe Cryptography Transition to 2029","The rise of cryptographically relevant quantum computers poses an existential threat to current public-key cryptography standards, potentially rendering RSA, ECC, and similar algorithms obsolete. Organizations that fail to inventory and migrate their cryptographic dependencies risk future decryption of sensitive data that adversaries are harvesting today — a strategy known as 'harvest now, decrypt later.' Microsoft's proactive shift to Post-Quantum Cryptography (PQC) reflects government mandates from the US (NIST) and France, signaling that regulatory deadlines around 2030 are becoming binding. Crypto-agility — the ability to swap cryptographic algorithms without major architectural overhaul — is now a foundational design requirement, not an optional enhancement. Organizations without a PQC roadmap are already behind schedule.","**Immediate actions:**\n- Conduct a full cryptographic inventory to identify all systems, certificates, and protocols relying on quantum-vulnerable algorithms (RSA, ECC, Diffie-Hellman).\n- Monitor NIST PQC standards (FIPS 203, 204, 205) and begin evaluating approved algorithms for compatibility with your environment.\n\n**Long-term improvements:**\n- Redesign cryptographic architectures with crypto-agility so algorithms can be swapped without full system re-engineering.\n- Establish a PQC migration roadmap with phased milestones targeting full transition of critical systems by 2029–2030 in alignment with government guidance.\n- Prioritize migration of long-lived sensitive data, PKI trust chains, and network transport layer encryption as high-risk areas.\n\n**Detection & compliance measures:**\n- Implement continuous discovery tooling to detect legacy or non-compliant cryptographic usage across networks and applications.\n- Align your PQC readiness program with NIST SP 800-208, NSA CNSA 2.0, and relevant regional regulatory frameworks to satisfy future audit requirements.",[12,13,14,15,16,17,18,19,20,21],"NIST SP 800-208 (Recommendation for Stateful Hash-Based Signature Schemes)","NIST FIPS 203 \u002F 204 \u002F 205 (PQC Algorithm Standards)","NSA CNSA 2.0 Suite","CIS Control 3: Data Protection","CIS Control 4: Secure Configuration of Enterprise Assets","NIST CSF PR.DS-2 (Data-in-transit protection)","NIST CSF PR.DS-1 (Data-at-rest protection)","GDPR Article 32 (Security of processing — appropriate technical measures)","ISO\u002FIEC 27001 A.10.1 (Cryptographic controls policy)","ENISA PQC Migration Guidelines",{},"published","2026-06-30T22:21:28.445516+00:00","2026-06-30T22:21:28.136+00:00",{"id":7,"url":27,"slug":28,"title":29},"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fblog\u002F2026\u002F06\u002F30\u002Fmicrosoft-advances-quantum-safe-security-as-the-risk-timeline-shifts\u002F","accelerating-the-quantum-safe-timeline-e3c87d","Accelerating the quantum-safe timeline",[31,37,43],{"id":32,"name":33,"slug":34,"description":35,"color":36},"859cf0ad-a7e9-42bb-a75d-bac6511fa5d5","Configuration Management","configuration-management","Misconfigs, default credentials, exposed services","#eab308",{"id":38,"name":39,"slug":40,"description":41,"color":42},"c0dcc566-3654-4d70-8ede-262a198e732f","Regulatory Compliance","regulatory-compliance","GDPR, NIS2, DORA, sector-specific violations","#ec4899",{"id":44,"name":45,"slug":46,"description":47,"color":48},"c8b843a5-d5a7-41d1-8d3b-cabded09d2ef","Data Protection","data-protection","Unencrypted data, missing DLP, poor classification","#3b82f6",[],[51],{"slug":52,"name":53,"problem":54},"encryption-key-management","Encryption and key management","Stolen data stays unreadable, and the keys stay under your control."]