Considerations for Achieving Crypto Agility: Strategies and Practices

Published

December 19, 2025

Author(s)

Elaine Barker, Lidong Chen, David Cooper, Dustin Moody, Andrew Regenscheid, Murugiah Souppaya, William Newhouse, Russell Housley, Sean Turner, William Barker, Karen Kent

Abstract

Cryptographic (crypto) agility refers to the capabilities needed to replace and adapt cryptographic algorithms in protocols, applications, software, hardware, firmware, and infrastructures while preserving security and ongoing operations. This white paper provides an in-depth survey of current approaches to achieving crypto agility. It discusses challenges and trade-offs and identifies approaches for providing operational mechanisms to achieve crypto agility. It also highlights critical working areas that require additional consideration.

Citation

NIST Cybersecurity White Papers (CSWP) - 39

Report Number

39

Pub Type

NIST Pubs

Download Paper

https://doi.org/10.6028/NIST.CSWP.39

Local Download

Keywords

cryptographic agility, cryptographic algorithm, cryptographic application programming interface (API), cryptographic risk management, cryptographic transition

Citation

Barker, E. , Chen, L. , Cooper, D. , Moody, D. , Regenscheid, A. , Souppaya, M. , Newhouse, W. , Housley, R. , Turner, S. , Barker, W. and Kent, K. (2025), Considerations for Achieving Crypto Agility: Strategies and Practices, NIST Cybersecurity White Papers (CSWP), National Institute of Standards and Technology, Gaithersburg, MD, [online], https://doi.org/10.6028/NIST.CSWP.39, https://tsapps.nist.gov/publication/get_pdf.cfm?pub_id=961230 (Accessed December 20, 2025)