CNSA Suite

CNSA Suite

Commercial National Security Algorithm Suite 2.0 (CNSA 2.0) provides quantum-resistant algorithms for customers looking for mitigations to perform, replacing CNSA 1.0 algorithms on a phased timeline running through 2031.

Read the Commercial National Security Algorithm Suite 2.0 and Quantum Computing FAQ.
Read the Commercial National Security Algorithm Suite 1.0 (in active use until 2030/2031).

CNSA 2.0 Timeline

The following is the planned timeline for CNSA 2.0 in the CSfC Program. Note that the timeline is subject to change.

  • 2026 - NIAP updates the relevant Protection Profiles to Include CNSA 2.0 algorithms and software/firmware signing.
  • 2026 - The CSfC Program will update MA, CWLAN, MSC, DAR CPs, and KM Annex to include CNSA 2.0 algorithms as objective requirements.
  • 2027 - CSfC Components begin to appear on the list with CNSA 2.0 algorithms supported.
  • 2028 - CSfC MA, CWLAN, MSC, DAR CPs, and KM Annex updated to require CNSA 2.0 for all encryption and software/firmware signing for all components listed on the CSfC Components list.
  • 2030 - All registered solutions have CNSA 2.0 algorithms or other Post-Quantum mitigations in place for all CSfC cryptographic layers.