Ncsc.Uk NCSC Updates TLS Guidance for Post-Quantum Cryptography
Article Content
- •NCSC recommends immediate migration to TLS 1.3 for quantum resilience.
- •Hybrid and pure PQC cipher configurations are now advised for TLS.
- •High priority migration activities should be completed by 2031.
The NCSC has released updated guidance on using TLS to incorporate post-quantum cryptography (PQC) configurations. This update follows the IETF's RFC 10024 publication, which standardizes hybrid key agreement mechanisms for TLS 1.3. Organizations using TLS 1.2 or older versions are urged to transition to TLS 1.3 to enhance security against quantum threats. The guidance emphasizes the importance of both hybrid and pure PQC cipher choices, with a recommendation for immediate migration to TLS 1.3. The NCSC advises that protecting data confidentiality in transit is a high priority, with a migration timeline set for completion by 2031. Stable pure PQC options are already available in major libraries, despite some delays in final RFC publication. The NCSC will continue to update its technical guidance as PQC support evolves.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (3)
Common questions
What is the urgency of migrating to TLS 1.3?
What are the recommended cipher choices?
When should migration be completed?
Continue Reading
CISA Mandates Urgent Patching of Five Critical Flaws Exploited by Flax Typhoon The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to patch five critical vulnerabilities by October 11, 2026, following exploitation by the China-linked hacking group Flax Typhoon. The vulnerabilities, added to CISA's Known Exploited Vulnerabilities (KEV) catalog, include…
CISA Warns of Exploited Vulnerabilities in ProFTPD, ONLYOFFICE, Strapi, and More The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added five vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, including critical flaws in ProFTPD, ONLYOFFICE Docs, Strapi, Apache Struts, and ISC BIND. These vulnerabilities are being by Chinese actors for cyber espionage, targeting…