This session details the Department of the Air Force (DAF) Public Key Infrastructure (PKI) Program strategic roadmap for Algorithm Evolution and the critical transition to Post-Quantum Cryptography (PQC). Attendees will explore the urgent need to mitigate "harvest now, decrypt later" threats and learn how the enterprise is actively preparing its infrastructure for the integration of quantum-resistant algorithms. Crucially, this session will provide actionable, in-depth guidance on how to conduct a comprehensive cryptographic inventory and initiate a PQC migration plan to secure the continuous digital thread. 

In this informative briefing, we will discuss the impending threat of cryptanalytically relevant quantum computers (CRQC) and the "Harvest Now, Decrypt Later" attack, which necessitate transitioning our security infrastructure into an agile, iterative adaptation process. This transition centers on the cryptographic progression from legacy cryptography to Algorithm Evolution cryptography (CNSA 1.0), and a later transition into CNSA 2.0 quantum-resistant defenses. To facilitate this shift, the DAF PKI SPO's role is to provide the roadmap, policies, planning frameworks, and guidance necessary for our enterprise infrastructure to successfully transition, while ensuring alignment with NSM-8, NSM-10, OMB M-23-02, the recent 2025 Government Accountability Office (GAO) report, and mandatory Algorithm Evolution (AE) directives including CNSSP 15, the NSA’s CNSA Suite 1.0 and 2.0 Cybersecurity Advisories, and the finalized NIST PQC standards (FIPS 203, 204, and 205). Accordingly, this presentation details the timeline, challenges, and phased strategies for cryptographic modernization. We will highlight DAF policies and actionable guidance, beginning with the mandatory Phase I Algorithm Evolution (AE) transition to CNSA 1.0, followed by the longer-term migration to Post-Quantum Cryptography (PQC). We will also discuss completing cryptographic inventories and developing comprehensive migration plans. Ultimately, the SPO's primary mission is to deliver the essential resources, policy directives, and guidelines required for organizations to systematically evolve their cryptography, ensuring long-term survival against quantum threats and meeting all compliance mandates.