Workshop Description
The four NIST PQC standards serve different purposes in intelligence cryptographic infrastructure. ML-KEM (FIPS 203) provides key encapsulation for session establishment and data encryption key transport. ML-DSA (FIPS 204) provides digital signatures for authentication and integrity in most applications. SLH-DSA (FIPS 205) offers hash-based signatures as a conservative alternative for long-lived certificates and root CAs. FN-DSA (FIPS 206) provides compact signatures based on NTRU lattices for bandwidth-constrained applications.
For intelligence organisations, PQC standard implementation involves complications beyond standard enterprise deployment. Classification level boundaries require algorithm negotiation across different security domains. Five Eyes interoperability demands coordinated migration timing and shared implementation choices. National cryptographic agencies (NSA, NCSC, ANSSI, ASD, CSE) provide additional guidance that may diverge on implementation details. This session examines each standard through the lens of intelligence system requirements, providing practical implementation guidance for technology policy leads.
What participants cover
- FIPS 203 (ML-KEM): parameter selection, performance benchmarks, and intelligence system integration
- FIPS 204 (ML-DSA) and FIPS 205 (SLH-DSA): signature scheme selection for different intelligence use cases
- FIPS 206 (FN-DSA): compact signatures for bandwidth-constrained intelligence communications
- CNSA 2.0 compliance timelines: 2030 symmetric and 2035 asymmetric migration deadlines
- National agency guidance comparison: NSA, NCSC, ANSSI, ASD, and CSE implementation recommendations
- Five Eyes PQC interoperability: coordinating algorithm choices and migration timing across allies