The result
On 27 October 2026 the U.S. National Institute of Standards and Technology finalized IR 8547, its guidance for the transition from quantum-vulnerable public-key cryptography to post-quantum standards [1]. The final report replaces the initial public draft released in November 2024 [2]. It builds on the three post-quantum standards NIST approved in August 2024: FIPS 203, 204 and 205 [3].
What it establishes
Public-key algorithms such as RSA and elliptic-curve cryptography protect most of the world’s digital communication and could be broken by a sufficiently large fault-tolerant quantum computer running Shor’s algorithm. No such machine exists. The migration is driven by expectation: data encrypted today can be recorded and decrypted later, and replacing cryptography across governments, banks, devices and software supply chains takes many years. The final report converts that expectation into a formal transition path for one of the world’s most influential standards bodies.
Position in the Civilizational Compute Stack
L5, institutions, reached without passing through the lower layers. That is what makes this development analytically unusual.
Why it matters
Quantum computing is the first technology whose institutional consequences arrive on a schedule set by its anticipated future rather than its present performance. Billions in migration spending, procurement rules and compliance regimes are being set in motion by a capability forecast. The same pattern can be expected in export controls, national investment and research security, which is why tracking the gap between anticipated and demonstrated capability is a central task of Quantum Civilization.
The open question
How fast does the installed base actually migrate, and which sectors and countries fall behind the timeline?
Signposts
Sectoral migration deadlines adopted by regulators; post-quantum algorithms enabled by default in major protocols and platforms; national guidance outside the United States aligning with or diverging from NIST.