NCSC updates TLS guidance with post-quantum cryptography recommendations
The UK's NCSC has published updated TLS guidance adding recommended configurations for post-quantum cryptography (PQC), following the IETF's RFC 10024 on hybrid post-quantum/traditional key agreement for TLS 1.3. The guidance covers both hybrid PQC/traditional and pure PQC cipher choices, and is suitable for general use and government OFFICIAL information. Only TLS 1.3 supports PQC, so organisations still on TLS 1.2 or earlier are urged to upgrade. NCSC's existing migration timeline sets 2031 as the deadline for high-priority PQC migrations, and recommends starting now given that standardised configurations and library support already exist.