pqcstatus
Regulation & guidance

NSA CNSA 2.0: cryptography requirements and deadlines

Government policy

Mandated algorithms: ML-KEM-1024, ML-DSA-87, LMS/XMSS, AES-256, SHA-384/512, with category-specific deadlines.

At a glance

TypeGovernment policy
JurisdictionUS
Who it applies toUS National Security Systems and their vendors.

Key dates

  1. Exclusive use for software/firmware signing and traditional networking equipment.
  2. Exclusive use for web browsers/servers, cloud services, operating systems and niche equipment.

Sources

  1. CNSA 2.0 FAQ (Ver. 2.1) · NSA (guidance)
  2. CNSA 2.0 Algorithms (Cybersecurity Advisory) · NSA (guidance)

Catalog version 2026-09-28. Every position links to its primary source; draft documents are labelled as such.

Frequently Asked Questions

Who must comply with NSA CNSA 2.0?

US National Security Systems and their vendors.

What are the key dates of NSA CNSA 2.0?

December 31, 2030: Exclusive use for software/firmware signing and traditional networking equipment. December 31, 2033: Exclusive use for web browsers/servers, cloud services, operating systems and niche equipment.