CISA Releases List of Post-Quantum Cryptography Product Categories

CISA, working with the NSA, published an initial, regularly updated list of hardware and software product categories that already implement or are transitioning to post-quantum cryptography (PQC), following Executive Order 14306. The guidance urges organizations to prioritize procuring PQC-capable technologies, highlighting currently available categories like PaaS/IaaS cloud, web browsers, messaging software, and endpoint encryption, while noting transitions in networking hardware, IAM, and enterprise security tools; automated crypto discovery tools and OT/IoT are out of scope.