PKI Algorithm Evolution

The DoW is moving its Public Key Infrastructure (PKI) to stronger cryptographic algorithms by 2030, a required stepping stone to quantum resistance. Applications integrating with DAF ICAM must comply.

The PKI Algorithm Evolution (AE) is a DoW-directed, phased transition on NIPRNet and SIPRNet that applies to all DoW Components. The stronger algorithms are an interim solution: they are not quantum safe, but they add protection against "harvest now, decrypt later" attacks until quantum-resistant algorithms can be implemented. The AF PKI SPO manages the evolution for the Department of the Air Force (DAF), and it is expected to be complete by 31 December 2030.

To understand what the migration means for your system, start with the System and Application Self-Assessment v1.1 or read the PKI AE slick sheet for an at-a-glance summary.

Key milestones

Now
Requirements are in effect

The requirements below are unwaiverable and effective immediately. New or upgraded IT must support the stronger algorithms while keeping backward compatibility with current credentials.
End of June 2027
Compatible token card stock delivered

New NIPRNet and SIPRNet token card stock that supports the larger key sizes is expected no later than this date.
31 December 2027
Certificate issuance changes

DoW Certificate Authorities stop issuing RSA-2048/SHA-256 certificates on NIPRNet and National Security Systems (NSS) SIPRNet, and issue RSA-3072, RSA-4096 and SHA-384 certificates instead. Systems that sunset before this date are exempt from the upgrade requirements.
31 December 2030
End of backward compatibility

Systems must continue to accept current RSA-2048/SHA-256 credentials until this date. From 2031, only RSA-3072, RSA-4096 and SHA-384 are expected to be in use.

What are cryptographic algorithms?

A cryptographic algorithm is the mathematical procedure that scrambles plain text so it is unreadable in transit (encryption) and converts it back to readable text on delivery (decryption). There are three main types.

Symmetric key

The same key encrypts the plain text and decrypts the ciphertext, so the sender and every recipient must hold the same shared key. Keys are smaller, which means less storage and faster transmission, but distributing a shared secret to every party is the main drawback.

Asymmetric key

Also called public key cryptography, it uses a related key pair. The public key can be shared openly; anyone with it can encrypt a message, but only the holder of the private key can decrypt it. Security depends on keeping the private key secret.

Hash function

Produces a fixed-length digest of a message. Hashes such as SHA-256 and SHA-384 verify integrity and are the part of a message that a digital signature signs.

Digital signature schemes use two algorithms: signing, where the private key processes the message or its hash, and verification, where the corresponding public key checks that the signature is valid.

DoW PKI uses asymmetric key cryptography for data encryption, authentication to trusted networks, websites, applications and portals, and digital signatures in electronic communications. A Certification Authority issues key pairs to people and devices, stored on a token or device. Your Common Access Card (CAC), for example, holds your personal key pair: the public key is published to the Global Address List, and the private key is protected by your PIN.

Why the DoW is moving to stronger algorithms

Algorithms believed secure today will not stay secure as number theory, cryptanalysis, computing methods and attack vectors advance, and public key algorithms are now susceptible to quantum-based attacks. After 2030, NIST SP 800-57 disallows the current public key algorithm pairing, Rivest-Shamir-Adleman (RSA)-2048 with Secure Hash Algorithm (SHA)-256.

Current and stronger PKI algorithms
Algorithm	Current	Stronger
Public key	RSA-2048	RSA-3072 minimum, RSA-4096 preferred
Hash	SHA-256	SHA-384

The migration covers NIPRNet, SIPRNet and every other enclave that relies on DoW digital certificates for PKI services. Larger key sizes are not quantum resistant; they keep systems ahead of emerging threats while the DoW prepares for quantum-resistant algorithms.

Governing memoranda:

DoD Chief Information Officer (CIO) memo, DoD Transition to Stronger Public Key Infrastructure Algorithms, 23 December 2022
DAF Transitioning to Stronger Public Key Algorithms, 5 January 2026

What this means for you

The DoW CIO memo sets requirements for each audience below. Systems that will sunset before December 2027 are exempt.

PKI-authenticated systems

IT infrastructure, such as server and workstation operating systems, browsers and email applications, must support the stronger algorithms and current RSA-2048/SHA-256 credentials through 31 December 2030.
Networks, websites and portals upgrading to RSA-3072/4096 and SHA-384 must stay backward compatible with current credentials through 31 December 2030.
New or refreshed PK-enabled commercial-off-the-shelf (COTS) and open-source integrations must support at least RSA-3072 (RSA-4096 preferred) and SHA-384.

System owners

Coordinate upgrade plans now with Federal and industry partners who regularly access your system.
Confirm with vendors that their products support RSA-3072/4096 and SHA-384. If you cannot, contact your local Test and Evaluation Working Group (TEWG) or the SIPRNet Token Evaluation Working Group (STEWG) to coordinate testing.
Complete a PKI inventory and the System and Application Self-Assessment, then test your system for compliance on NIPRNet and SIPRNet.

Program and acquisition managers

Assess new and upgraded IT and information system procurements for the added memory, storage and processing power the stronger algorithms need.
Identify unfunded requirements and plan tech refreshes and upgrades in the Program Objective Memorandum (POM) cycles.
Without POM funding, you may not be able to procure the upgrades the stronger algorithms need.

Token managers

All on-hand and in-use NIPRNet and SIPRNet token card stock will be replaced, based on the anticipated 2028 through 2030 card issuance period.
The AF PKI SPO is developing the purchasing strategy so current stock stays available until compatible tokens arrive.

More information is on the DoW Cryptographic Modernization webpage (CAC required).

Impact to systems

The new RSA algorithms use larger keys, so digital signature blocks grow. That affects system protocols, storage, compute power and network latency, and may mean upgrading existing equipment or buying new equipment.

New equipment must support

The stronger algorithms
Sufficient processing power (minimum to be determined)
Sufficient memory (minimum to be determined)

Product testing

The AF PKI SPO is testing AF PKI enterprise products, and the DoW TEWG and STEWG are testing DoW enterprise products, as impacts are identified throughout the transition. Check the products tested by the DoW and AF PKI SPO before contacting vendors.

Answering the enablement questionnaire

The DAF ICAM enablement questionnaire asks for your application's cryptographic compliance status so the enablement team can plan around it.

Compliant: The application supports RSA-3072/4096 and SHA-384 and still accepts current RSA-2048/SHA-256 credentials.
In-Progress: You know the requirements and your compliance plan is under way, for example vendor confirmation, testing or a funded upgrade.
Action Required: You have not started. Use the support tools on this page to determine your next steps, starting with a PKI inventory and the self-assessment.

Frequently asked questions

Will I need to purchase new equipment?

Possibly. Larger keys and signature blocks affect protocols, storage, compute power and latency, so you may need to upgrade or replace equipment to meet minimum processing and storage needs. See Impact to systems.

Are these changes quantum resistant?

No. Moving to larger key sizes is not quantum resistant.

Are quantum-resistant algorithms available now?

NIST released the first finalized post-quantum encryption standards on 13 August 2024. See the NIST announcement.

Can I skip straight to quantum-resistant algorithms?

No. To stay compatible with DoW and NSS PKI, your system must transition to RSA-3072/4096 and SHA-384.

When will quantum-resistant algorithms be implemented?

The DoW will publish detailed timelines later. The CNSA Suite 2.0 guidance includes basic timelines for reference.

Which of my vendors do I need to contact?

Any vendor whose product is not on the products tested list. The vendor email template below can help.

Do I need to do anything if my system sunsets before 31 December 2027?

No. Systems sunsetting before 31 December 2027 are exempt from the algorithm upgrade requirements.

How do I understand the impact on my system?

First complete a PKI inventory of every certificate, middleware, software and hardware component that uses PKI. Then complete the System and Application Self-Assessment to identify impacts, and use the results to assess risk and prioritize changes.

Where is compliance tracked?

DAF compliance tracking began in January 2024 through the Information Technology Investment Portfolio Suite (ITIPS) 2.0.

Which tokens support the larger key sizes?

The tokens identified so far are listed below; more may follow.

NIPRNet: Idemia Oberthur ID-One Cosmo v8.0D DI 128K; Giesecke+Devrient GDA SCE v7.0 DI 144K
SIPRNet: Giesecke+Devrient GDA v7.0 SST

When should I POM for equipment upgrades and procurements?

Plan tech refreshes and upgrades for the algorithm evolution in the FY26 and FY27 POM cycles.

Support tools

These AF PKI SPO tools help determine readiness for the DoW requirements and are updated as more information becomes available.

Self-assessment

Complete the System and Application Self-Assessment v1.1, then report your responses to HQ Cyberspace Capabilities Center.

Self-assessment feedback

Tell the AF PKI SPO how the self-assessment worked for you through the feedback survey.

Products tested

Review the products tested by the DoW and AF PKI SPO, including vendor compatibility status.

Communicating the change

These products help socialize the PKI Algorithm Evolution with senior leaders, system owners and administrators, acquisition managers and other NIPRNet and SIPRNet users. They are sourced from the DoW CIO memo, which is cleared for public release (Distribution A).

Brief leadership with the PKI Algorithm Evolution Executive Brief.

Vendor email template

Use this template to ask vendors about system-specific hardware and software. The DoW and DAF are working with enterprise vendors directly, so check the products tested list first.

The DoW and the DAF have begun the transition to stronger PKI algorithms on DoW networks, systems, and applications. This message is to notify [vendor name] of the transition plan for situational awareness and immediate action.

This transition will evolve over the next several years per the following key activities and milestones set by the DoW; expected completion is by Dec 2030.

The DoW will cease issuing PKI certificates utilizing RSA-2048 and SHA-256 on both NIPRNet and SIPRNet on 31 Dec 2027.

The DoW will begin issuing PKI certificates using RSA-3072, RSA-4096, and SHA-384 cryptographic algorithms no later than 31 Dec 2027.

Systems must continue to accept RSA-2048/SHA-256 PKI certificates until 31 Dec 2030.

Expectation: only RSA-3072, RSA-4096, and SHA-384 will be in use beginning 2031.

Please respond via return email to [POC] with:

Compatibility status and information

Upgrade timelines for products used by the Air Force on DoW and DAF networks

Whether any products will not be able to support these algorithms

References and contacts

References

AF PKI SPO

The AF PKI SPO is part of the Protect Branch (AFLCMC/HNID) at Joint Base San Antonio-Lackland, Texas, in the Enterprise IT and Cyber Infrastructure Division (HNI) of the Air Force Life Cycle Management Center's Command, Control, Communications, Intelligence and Networks (C3I&N) Directorate.

Contact the AF PKI SPO or send feedback.

Content last reviewed 4 November 2026. Next review due 2 February 2027.