[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"framework:nist-sp\u002F800-131":3},{"item":4,"lessons":16,"controls":46,"related":75},{"family":5,"item":6,"code":7,"title":8,"citations":9,"publisher":10,"summary_md":11,"official_text":12,"official_attribution":12,"official_url":13,"link_label":14,"note":12,"updated_at":15},"nist-sp","800-131","SP 800-131","SP 800-131A Rev. 2: Transitioning the Use of Cryptographic Algorithms and Key Lengths",7,"US National Institute of Standards and Technology (NIST)","**What it covers.** NIST guidance on which cryptographic algorithms and key lengths are acceptable, deprecated or disallowed for protecting information, and on transitions to stronger ones. It covers encryption, digital signatures, hashing, key agreement and random bit generation. A revision in progress also addresses the planned retirement of algorithms vulnerable to quantum computers.\n\n**In practice.** Applying it well means maintaining an inventory of cryptography in use, comparing it with current guidance and planning migration away from weak algorithms such as SHA-1 for signatures. The same inventory supports the transition to post-quantum cryptography. Evidence includes the cryptographic inventory, migration plans and configuration standards.\n\n**Common gaps.** Typical gaps are no inventory of where cryptography is used, weak algorithms embedded in legacy systems and no ownership of migration. Certificates and keys issued with older parameters can also remain in use for years.",null,"https:\u002F\u002Fcsrc.nist.gov\u002Fpublications\u002Fsp800","Find it among NIST SP 800 publications","2026-10-18T15:18:43.663+00:00",{"total":9,"list":17},[18,22,26,30,34,38,42],{"slug":19,"title":20,"published_at":21},"post-quantum-cryptography-organizations-must-act-now-before-quantum-computing-breaks-todays-encrypti","Post-Quantum Cryptography: Organizations Must Act Now Before Quantum Computing Breaks Today's Encryption","2026-09-03T16:21:16.12+00:00",{"slug":23,"title":24,"published_at":25},"quantum-guard-act-pushes-energy-sector-toward-post-quantum-cryptography-standards","Quantum-GUARD Act Pushes Energy Sector Toward Post-Quantum Cryptography Standards","2026-08-24T20:21:06.989+00:00",{"slug":27,"title":28,"published_at":29},"ai-uncovers-theoretical-cryptographic-weaknesses-in-post-quantum-algorithms","AI Uncovers Theoretical Cryptographic Weaknesses in Post-Quantum Algorithms","2026-07-28T22:20:52.242+00:00",{"slug":31,"title":32,"published_at":33},"ai-assisted-cryptanalysis-exposes-weaknesses-in-aes-variants-and-post-quantum-schemes","AI-Assisted Cryptanalysis Exposes Weaknesses in AES Variants and Post-Quantum Schemes","2026-07-28T20:20:37.736+00:00",{"slug":35,"title":36,"published_at":37},"most-internet-facing-systems-unprepared-for-quantum-cryptography-threats","Most Internet-Facing Systems Unprepared for Quantum Cryptography Threats","2026-06-24T16:22:14.416+00:00",{"slug":39,"title":40,"published_at":41},"federal-agencies-face-2030-deadline-to-adopt-post-quantum-cryptography","Federal Agencies Face 2030 Deadline to Adopt Post-Quantum Cryptography","2026-06-23T18:21:51.796+00:00",{"slug":43,"title":44,"published_at":45},"critical-entropy-flaw-exposes-schneider-electric-ics-products-to-unauthorized-access","Critical Entropy Flaw Exposes Schneider Electric ICS Products to Unauthorized Access","2026-06-18T18:22:10.97+00:00",[47,52,57,62,67,71],{"slug":48,"name":49,"problem":50,"stories":51},"encryption-key-management","Encryption and key management","Stolen data stays unreadable, and the keys stay under your control.",4,{"slug":53,"name":54,"problem":55,"stories":56},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",3,{"slug":58,"name":59,"problem":60,"stories":61},"ot-security","OT and industrial control system security","Factory, building and utility control systems get visibility and protection.",2,{"slug":63,"name":64,"problem":65,"stories":66},"patch-management","Automated patch management","Known holes get closed in days, not months.",1,{"slug":68,"name":69,"problem":70,"stories":66},"attack-surface-management","External attack surface management (EASM)","You find your forgotten internet-facing systems before attackers do.",{"slug":72,"name":73,"problem":74,"stories":66},"network-segmentation","Network segmentation and microsegmentation","One compromised machine can no longer reach everything else.",[76,82,88,92,97,101,105,110],{"family":77,"item":78,"code":79,"title":80,"together":81},"gdpr","32","Article 32","Security of processing",6,{"family":83,"item":84,"code":85,"title":86,"together":87},"cis","16","Control 16","Application Software Security",5,{"family":83,"item":89,"code":90,"title":91,"together":87},"3","Control 3","Data Protection",{"family":93,"item":94,"code":95,"title":96,"together":56},"nist-csf","pr-ds","PR.DS-1","Data Security",{"family":83,"item":98,"code":99,"title":100,"together":61},"7","Control 7","Continuous Vulnerability Management",{"family":102,"item":103,"code":104,"title":104,"together":61},"itil","overview","ITIL",{"family":106,"item":107,"code":108,"title":109,"together":61},"nerc-cip","cip-007","CIP-007-6","CIP-007: Systems Security Management",{"family":111,"item":112,"code":113,"title":114,"together":61},"iso-27001","a-8-24","Annex A 8.24","ISO\u002FIEC 27001:2022 Annex A 8.24: Use of cryptography"]