Evidence limitation
A post-quantum standard is not a completed migration
Direct limitation
Existing protocols, hardware, keys, certificates, records, suppliers, and recovery processes may not support them.
Artifact or claim that may be supported
NIST FIPS 203, 204, and 205 provide standardized algorithms.
What the evidence does not establish
Existing protocols, hardware, keys, certificates, records, suppliers, and recovery processes may not support them.
Additional evidence required
A paper inventory can be represented as quantum readiness.
Mitigation
Maintain algorithm inventories, dependency maps, interoperability tests, hybrid and rollback plans, and evidence of actual deployment state.
Supporting sources
- FIPS 203 — Module-Lattice-Based Key-Encapsulation Mechanism Standard — NIST; FIPS 203; FINAL. Exact claim-support entries: 1. Revalidated 2026-08-15T23:55:00Z.
- FIPS 204 — Module-Lattice-Based Digital Signature Standard — NIST; FIPS 204; FINAL. Exact claim-support entries: 1. Revalidated 2026-08-15T23:55:00Z.
- FIPS 205 — Stateless Hash-Based Digital Signature Standard — NIST; FIPS 205; FINAL. Exact claim-support entries: 1. Revalidated 2026-08-15T23:55:00Z.