NIST cryptographic algorithm deprecation schedule: what is approved, deprecated, and disallowed, and when
Per-algorithm status under NIST guidance for the post-quantum cryptographic transition. Each record is one algorithm or key-length configuration with its current approval status (approved, acceptable, deprecated, restricted, disallowed, legacy use), the date at which the status changes, and the recommended replacement. Drawn from three NIST publications: IR 8547 (post-quantum transition timeline), SP 800-131A Rev 2 (current algorithm status rules) and Rev 3 draft (upcoming changes), and FIPS 203/204/205 (the post-quantum replacement standards). The key deadlines: quantum-vulnerable public-key algorithms (RSA, ECDSA, ECDH, finite-field DH) deprecated after 2030, disallowed after 2035; SHA-1 and 224-bit hashes deprecated through 2030, disallowed thereafter. AES-256 and SHA-2/SHA-3 are NOT on the deprecation schedule. Answers 'when is RSA deprecated?', 'is AES-256 affected by the post-quantum transition?', 'what replaces ECDSA?', and 'what is the current NIST status of 3DES?'
The data
| Algorithm | Purpose | Current status | Planned status | Replacement | Source document |
|---|---|---|---|---|---|
| 224-bit hash functions | hashing | Acceptable | Scheduled for retirement (SP 800-131A Rev 3 draft) | SHA-256 or higher | SP 800-131A Rev 3 draft (via EncryptionConsulting summary) |
| AES-256 | encryption | Approved | No change planned | N/A | IR 8547 (not on deprecation schedule, per EncryptionConsulting summary) |
| Classical algorithms below 112-bit security strength | all cryptographic purposes | Disallowed | No change planned (already disallowed under Rev 2) | Algorithms meeting minimum 112-bit security strength | SP 800-131A Rev 2 (March 2019) |
| DSA (signature generation) | digital signature | Deprecated | Disallowed (SP 800-131A Rev 3 draft proposes retirement) | ML-DSA (FIPS 204) | SP 800-131A Rev 3 draft (via EncryptionConsulting summary) |
| ECB mode | encryption | Acceptable | Disallowed (SP 800-131A Rev 3 draft proposes retirement) | CBC, CTR, GCM, or other approved modes | SP 800-131A Rev 3 draft (via EncryptionConsulting summary) |
| ECDH | key establishment | Approved | Deprecated after 2030, Disallowed after 2035 | ML-KEM (FIPS 203) | IR 8547, Section 3 (via EncryptionConsulting summary) |
| ECDSA | digital signature | Approved | Deprecated after 2030, Disallowed after 2035 | ML-DSA (FIPS 204) | IR 8547, Section 3 (via EncryptionConsulting summary) |
| EdDSA | digital signature | Approved | Deprecated after 2030, Disallowed after 2035 | ML-DSA (FIPS 204) | IR 8547, Section 3 (via EncryptionConsulting summary) |
| Falcon | digital signature | Selected for standardization | Pending FIPS standard | N/A | PQC project page |
| Finite-field Diffie-Hellman | key establishment | Approved | Deprecated after 2030, Disallowed after 2035 | ML-KEM (FIPS 203) | IR 8547, Section 3 (via EncryptionConsulting summary) |
| HQC | key establishment | Selected for standardization | Pending FIPS standard | N/A | PQC project page (selected March 2025) |
| ML-DSA (FIPS 204) | digital signature | Approved | No change planned | N/A | FIPS 204 (August 2024) |
| ML-KEM (FIPS 203) | key establishment | Approved | No change planned | N/A | FIPS 203 (August 2024) |
| Quantum-vulnerable public-key algorithms (general) | digital signature and key establishment | Approved | Deprecated after 2030, Disallowed after 2035 | Post-quantum standards (FIPS 203, 204, 205) | IR 8547 (Initial Public Draft, November 12, 2024) |
| RSA key transport | key establishment | Approved | Deprecated after 2030, Disallowed after 2035 | ML-KEM (FIPS 203) | IR 8547, Section 3 (via EncryptionConsulting summary) |
| RSA PKCS#1 v1.5 (signatures) | digital signature | Approved | Deprecated after 2030, Disallowed after 2035 | ML-DSA (FIPS 204) | IR 8547, Section 3 (via EncryptionConsulting summary) |
| RSA-PSS | digital signature | Approved | Deprecated after 2030, Disallowed after 2035 | ML-DSA (FIPS 204) | IR 8547, Section 3 (via EncryptionConsulting summary) |
| RSA (signatures) | digital signature | Approved | Deprecated after 2030, Disallowed after 2035 | ML-DSA (FIPS 204) | IR 8547, Section 3 (via EncryptionConsulting summary) |
| SHA-1 | hashing | Deprecated | Disallowed (SP 800-131A Rev 3 draft proposes retirement) | SHA-2 or SHA-3 | SP 800-131A Rev 2 / Rev 3 draft (via EncryptionConsulting summary) |
| SHA-2 family | hashing | Approved | No change planned | N/A | IR 8547 (not on deprecation schedule, per EncryptionConsulting summary) |
| SHA-3 family | hashing | Approved | No change planned | N/A | IR 8547 (not on deprecation schedule, per EncryptionConsulting summary) |
| SLH-DSA (FIPS 205) | digital signature | Approved | No change planned | N/A | FIPS 205 (August 2024) |
Where this came from
Every record above links the page it was taken from and quotes the sentence that states it. These are the 4 sources this dataset was assembled from.
- encryptionconsulting.comhttps://www.encryptionconsulting.com/education-center/nist-ir-8547-sp-800-131a-algorithm-transitions/
- csrc.nist.govhttps://csrc.nist.gov/pubs/sp/800/131/a/r2/final
- csrc.nist.govhttps://csrc.nist.gov/projects/post-quantum-cryptography
- csrc.nist.govhttps://csrc.nist.gov/pubs/ir/8547/ipd
Machine-readable
- data.jsonThe whole dataset — every record with its source URL and source quote.
- Open Knowledge Format bundleOne JSON object per line — every record's frontmatter and quoted span exactly as it is held here, in one fetch.
- How this is made and checkedWhat "verified against source" does and does not mean.