- Published
- Source
- NCSC Official
- Filed under
- UK Gov & NCSC
- Length
- 186 words, in full
Today we have published our updated guidance on using TLS to protect data, to include recommended configurations for post-quantum cryptography (PQC). This follows the recent publication of RFC 10024 (Post-quantum traditional hybrid key agreement mechanisms for TLS 1.3) by the IETF (Internet Engineering Task Force). These configurations are suitable for general use, and for protecting government OFFICIAL information.
The guidance supports migration to PQC in line with the NCSC’s published timelines, in which we recommend that high priority migration activities should be carried out by 2031. For many organisations, protecting the confidentiality of their data in transit will fall into this ‘high priority’ category, and the availability of standardised post-quantum TLS configurations together with implementations in well-studied libraries, means that you should be aiming to make this move now.
We will continue to provide updates to our technical guidance as PQC support is introduced into particular protocols and product types. In the coming months we plan to update our IPsec guidance as those RFCs are finalised, and to include post-quantum authentication recommendations for TLS.
Jeremy B
Principal Technical Director for Crypt and High Threat Technologies, NCSC
Contains public sector information licensed under the Open Government Licence v3.0. Open Government Licence v3.0 · Published by NCSC.
MyCyberWay Premium Jobs
Premium Jobs · our UK cyber job feed
Every UK cyber security role, scored against your CV.
Our job engine reads the UK's job boards and employer career sites every hour, takes out anything that isn't cyber security, removes duplicates and closed adverts, and scores every role it keeps against your CV.
184 UK cyber security roles in the last run · 86 at employers with a sponsor licence
- Cyber security roles only
- A CV match on every role
- Emails at the times you choose
Explore Premium JobsHow it works
Rather start free?WhatsApp channel (opens in a new tab)Telegram channel (opens in a new tab)
Headlines and short summaries only, except where a public body publishes under an open licence. Every story links to its publisher, who owns it. MyCyberWay does not edit or endorse third-party reporting.
