International Standards Bodies
No single organization owns the post-quantum transition. NIST selects the algorithms, the IETF embeds them in protocols, ISO/IEC and ITU-T carry them into the international system, ETSI leads migration guidance, and regional regulators and telecom bodies set the deadlines. This page maps who does what.
Why several bodies, not one
Cryptography reaches production through a chain of standards. A scheme must first be specified and analyzed, then encoded into protocols and data formats, then mandated or recommended by the authorities that govern a given sector or country. Each link in that chain is owned by a different kind of organization, and PQC is now moving through all of them in parallel.
The global landscape
| Body | Role | Key PQC outputs |
|---|---|---|
| NIST (US) | Algorithm source — runs the open standardization process and publishes the FIPS | FIPS 203 (ML-KEM), FIPS 204 (ML-DSA), FIPS 205 (SLH-DSA), SP 800-208 (stateful hash-based), IR 8547 (transition) |
| IETF | Protocols & formats — weaves PQC into TLS, X.509/CMS, IKEv2 and more | RFCs already exist for XMSS/LMS, IKEv2 multiple key exchanges, PQ/T hybrid terminology, SSH sntrup761x25519, and the algorithm identifiers and encodings for ML-DSA, SLH-DSA and ML-KEM in X.509/CMS; TLS hybrid key exchange, ML-DSA authentication in TLS, and composite certificates/composite KEM remain Internet-Drafts |
| ISO/IEC JTC 1/SC 27 | International cryptographic standards — adopts and aligns with NIST output | ISO/IEC 18033, 14888, 11770 families; 14888-4 stateful hash-based signatures |
| ITU-T SG17 | Telecom security — quantum-safe guidance and QKD networking | X.1710-series for QKD networks; quantum-safe security recommendations |
| ETSI (Europe) | Migration, hybrid & crypto-agility guidance; runs the QSC conference | TR 103 619 (migration), TS 103 744 (hybrid key exchange) |
| Regional regulators | Mandates & deadlines per jurisdiction | NSA CNSA 2.0, BSI TR-02102, ANSSI guidance, NCSC roadmap, EU recommendation |
| Telecom bodies | Sector-specific profiles for mobile networks | 3GPP and GSMA quantum-safe work |
NIST — the algorithm source
NIST ran the multi-round, public competition that produced the first PQC standards in 2024. Its FIPS documents define the algorithms everyone else builds on. Critically, NIST specifies the math; it does not, by itself, dictate how a TLS handshake or an X.509 certificate carries that math — that is the IETF's domain.
IETF — protocols and data formats
PQC is being woven through many IETF working groups: TLS, LAMPS (certificates and CMS), IPSECME, and CFRG. Hash-based signatures are already RFCs; most lattice-based protocol work is still in Internet-Draft form and evolving. See IETF.
ISO/IEC and ITU-T — the international system
ISO/IEC JTC 1/SC 27 is the international home for cryptographic standards and tends to adopt or align with NIST output, easing global procurement. ITU-T SG17 covers telecom security, including quantum-safe guidance and QKD networking. See ISO/IEC & ITU-T.
ETSI — migration leadership in Europe
The ETSI Quantum-Safe Cryptography Working Group, under TC CYBER, focuses on migration strategy, hybrid key exchange, and crypto-agility rather than algorithm design. It co-runs the annual ETSI/IQC conference. See ETSI.
Regulators and telecom bodies
National authorities turn standards into obligations with concrete deadlines — and several, notably BSI and ANSSI, strongly emphasize hybrid deployment. See Regional Mandates. The telecom sector adds its own profiles via 3GPP and GSMA, summarized in Telecom.
Standards Overview →
Back to the standards hub and the NIST FIPS suite.
IETF →
PQC across TLS, LAMPS, IPSECME and CFRG.
ISO/IEC & ITU-T →
The international standards system and its NIST alignment.
ETSI →
Migration, hybrid and crypto-agility guidance.
Regional Mandates →
Deadlines and stances by jurisdiction.
Standards & references
- NIST PQC project — the algorithm source other bodies build on.
- ETSI Quantum-Safe Cryptography — European migration and crypto-agility guidance.
- Open Quantum Safe — open implementations tracking the evolving standards.
- Resources — full standards register
国际标准组织全景
后量子迁移没有单一主导者。NIST 负责遴选算法，IETF 将其嵌入协议，ISO/IEC 与 ITU-T 推动其进入国际标准体系，ETSI 主导迁移指南，各国监管机构与电信组织则设定截止期限。本页梳理各方分工。
为何是多家而非一家
密码学要进入生产环境，需经历一条标准链条。算法须先被规范并完成分析，再被编码进协议与数据格式，最后由各行业或各国主管机构强制或推荐采用。链条的每一环由不同类型的组织主导，而 PQC 正在所有这些环节中并行推进。
全球分工一览
| 组织 | 职责 | 核心 PQC 成果 |
|---|---|---|
| NIST（美国） | 算法源头，主持公开标准化流程并发布 FIPS | FIPS 203（ML-KEM）、FIPS 204（ML-DSA）、FIPS 205（SLH-DSA）、SP 800-208（有状态哈希签名）、IR 8547（迁移） |
| IETF | 协议与格式，将 PQC 织入 TLS、X.509/CMS、IKEv2 等 | XMSS/LMS、IKEv2 多重密钥交换、PQ/T 混合术语、SSH sntrup761x25519，以及 X.509/CMS 中 ML-DSA、SLH-DSA、ML-KEM 的算法标识与编码已有 RFC；TLS 混合密钥交换、TLS 中 ML-DSA 认证、复合证书/复合 KEM 等仍为 Internet-Draft |
| ISO/IEC JTC 1/SC 27 | 国际密码标准，采纳并对齐 NIST 成果 | ISO/IEC 18033、14888、11770 系列；14888-4 有状态哈希签名 |
| ITU-T SG17 | 电信安全，量子安全指南与 QKD 组网 | QKD 网络的 X.1710 系列；量子安全相关建议书 |
| ETSI（欧洲） | 迁移、混合与密码敏捷性指南；主办 QSC 大会 | TR 103 619（迁移）、TS 103 744（混合密钥交换） |
| 区域监管机构 | 各司法辖区的强制要求与时间表 | NSA CNSA 2.0、BSI TR-02102、ANSSI 指南、NCSC 路线图、EU 建议 |
| 电信组织 | 面向移动网络的行业专用规范 | 3GPP 与 GSMA 的量子安全工作 |
NIST 算法源头
NIST 主持了历经多轮的公开征集，于 2024 年产出首批 PQC 标准。其 FIPS 文件定义了各方据以构建的算法。需要强调的是，NIST 规范的是算法本身，并不直接规定 TLS 握手或 X.509 证书如何承载这些算法，后者属于 IETF 的范畴。
IETF 协议与数据格式
PQC 正贯穿多个 IETF 工作组：TLS、LAMPS（证书与 CMS）、IPSECME 与 CFRG。哈希签名已成 RFC，而多数格基算法的协议工作仍处于 Internet-Draft 阶段并在持续演进。详见 IETF。
ISO/IEC 与 ITU-T 国际体系
ISO/IEC JTC 1/SC 27 是国际密码标准的归口，通常采纳或对齐 NIST 成果，便利全球采购。ITU-T SG17 负责电信安全，涵盖量子安全指南与 QKD 组网。详见 ISO/IEC 与 ITU-T。
ETSI 欧洲迁移引领者
ETSI 量子安全密码工作组隶属 TC CYBER，聚焦迁移策略、混合密钥交换与密码敏捷性，而非算法设计，并联合主办年度 ETSI/IQC 大会。详见 ETSI。
监管机构与电信组织
各国主管机构把标准转化为带明确期限的义务，其中 BSI 与 ANSSI 尤其强调混合部署。详见 区域强制要求。电信行业则通过 3GPP 与 GSMA 制定专用规范，概览见 电信。
标准总览 →
返回标准枢纽与 NIST FIPS 套件。
IETF →
横跨 TLS、LAMPS、IPSECME 与 CFRG 的 PQC 工作。
ISO/IEC 与 ITU-T →
国际标准体系及其与 NIST 的对齐。
ETSI →
迁移、混合与密码敏捷性指南。
区域强制要求 →
各辖区的期限与立场。
标准与参考
- NIST PQC 项目 — 其他组织据以构建的算法源头
- ETSI Quantum-Safe Cryptography — 欧洲迁移与密码敏捷性指南
- Open Quantum Safe — 紧跟标准演进的开源实现
- 资源链接 — 完整标准登记册