Post Quantum Cryptography for Power Grid and Critical Infrastructure (CISA Guidance)

Why the Grid Matters for Q-Day

The US bulk electric system is a national security asset. Its control plane runs on a patchwork of SCADA, ICCP, DNP3, IEC 61850, and vendor-specific protocols, most of which were designed before cryptographic authenticity and confidentiality were serious requirements. Where cryptography does exist, it is typically RSA or ECDSA for signing and ECDH or TLS for confidentiality. All of it is quantum-vulnerable. And unlike IT systems, grid control devices (relays, RTUs, PLCs) can have service lives of 20 to 40 years.

Critical infrastructure (electricity, water, gas, pipelines, rail, telecommunications) is where Post Quantum Cryptography migration has the highest stakes and the hardest operational constraints. This guide walks through CISA's current guidance, the NERC CIP status, and what utility security teams should be doing in 2026.

CISA's Post-Quantum Considerations for Operational Technology

The Cybersecurity and Infrastructure Security Agency published Post-Quantum Considerations for Operational Technology in October 2024. The document is not a mandate. It is a practical risk framework for OT owners and operators. Key CISA points:

• Inventory cryptographic assets across OT and IT environments.
• Prioritize long-lived data and long-lived equipment.
• Engage vendors on crypto-agility and PQC roadmaps.
• Treat PQC migration as a multi-year program, not a one-shot upgrade.
• Plan for hybrid deployments where legacy and PQC coexist.

This aligns with the joint NSA/CISA/NIST Quantum-Readiness fact sheet from August 2023, which called out critical infrastructure explicitly.

NERC CIP: No PQC Mandate Yet

As of April 2026, no NERC Critical Infrastructure Protection standard specifically mandates Post Quantum Cryptography. CIP-005 (electronic security perimeters), CIP-007 (system security management), and CIP-011 (information protection) cover cryptographic controls in general terms. They do not yet name PQC primitives. Expect NERC to align future CIP revisions with CNSA 2.0, NIST FIPS 203 and 204, and CISA guidance. Until then, utilities should use the existing CIP framework to document quantum risk as part of their cybersecurity risk management programs.

Protocol Realities: DNP3, IEC 61850, and ICCP

Grid protocols have varied authentication stories:

• DNP3 Secure Authentication v5 (SA5). Uses HMAC-SHA-256 for authentication. Symmetric, so relatively quantum-resistant. The key management uses asymmetric crypto and is the exposure point.
• IEC 61850 / IEC 62351. Station and substation protocols with defined TLS profiles. Quantum-vulnerable at the TLS handshake.
• ICCP (IEC 60870-6 TASE.2). Control center to control center. TLS-based. Quantum-vulnerable.
• Modbus, proprietary vendor protocols. Often unencrypted. Exposure is physical access rather than crypto.

Long-Lived Field Devices

A line protection relay installed in 2026 is expected to run until 2050. Its crypto cannot be field-refreshed easily. Utilities that want to avoid a forklift upgrade during the PQC transition need crypto-agility as a procurement requirement today. That means vendors must commit to firmware paths that can add ML-KEM and ML-DSA support, and asset management systems must track cryptographic inventory per device.

Smart Grid, AMI, and DER

Advanced Metering Infrastructure (AMI) and Distributed Energy Resources (DER) push crypto into millions of endpoints. ANSI C12.22 meter communications, IEEE 2030.5 distributed resource protocols, and IEEE 1815 (DNP3) all use classical crypto. A compromise of the DER control path could result in coordinated generation drop, and an adversary with a quantum computer could forge signatures on device identity certificates. Utility cybersecurity programs should flag AMI and DER migration as a first-wave PQC priority because the endpoint count makes a forklift infeasible.

Water, Gas, Pipeline, and Rail

Every sector CISA designates as critical shares the same basic picture: long-lived assets, classical crypto, HNDL exposure. The Environmental Protection Agency has signaled water-sector cybersecurity expectations. TSA has issued security directives for pipeline and rail. None of these explicitly mandate PQC yet. All will eventually.

Recommended Utility Actions

Utility security teams should be doing:

1. Crypto inventory across OT, IT, and corporate environments.
2. Risk prioritization by device lifetime and data sensitivity.
3. Engagement with protective relay, RTU, and PLC vendors on crypto-agility.
4. Hybrid TLS pilots on control-center-to-control-center links.
5. Board-level reporting on PQC readiness using CISA's OT framework.
6. Procurement language requiring PQC roadmaps from new equipment purchases.

QNSQY and Utility Data

QNSQY is a Post Quantum Cryptography data encryption platform used to protect utility datasets at rest: SCADA historian archives, outage management records, metering data, NERC CIP evidence, engineering design packages, and customer PII. ML-KEM plus ML-DSA protection applies regardless of the OT protocol choices on the wire.

Frequently Asked Questions

Does NERC CIP require Post Quantum Cryptography?

No. As of April 2026 no NERC CIP standard specifically mandates PQC. CIP-005, CIP-007, and CIP-011 cover cryptographic controls in general terms. Expect future revisions to align with CNSA 2.0 and NIST FIPS 203 and 204.

What is CISA saying about OT and PQC?

CISA published Post-Quantum Considerations for Operational Technology in October 2024. It is guidance, not a mandate, and recommends inventory, prioritizing long-lived data and equipment, vendor engagement, and multi-year hybrid migration planning.

Is DNP3 Secure Authentication v5 quantum-resistant?

SA5 uses HMAC-SHA-256, which is symmetric and quantum-resistant. The exposure is in the key management layer, which often uses asymmetric cryptography.

How long do grid field devices last?

Protective relays, RTUs, and PLCs commonly have 20 to 40 year service lives. This is why crypto-agility must be a procurement requirement now.

Where should utility PQC migration start?

Start with control-center-to-control-center links (ICCP), corporate IT and OT boundary infrastructure, AMI headend, and any system touching customer PII. Field device firmware agility should be enforced in procurement.

Sources

1. CISA Post-Quantum Considerations for Operational Technology
2. Joint NSA/CISA/NIST Quantum-Readiness Fact Sheet
3. NIST FIPS 203 (ML-KEM)
4. NIST FIPS 204 (ML-DSA)
5. NSA CNSA 2.0 FAQ

Related Articles

• Harvest Now, Decrypt Later Threat
• PQC for Government and Defense
• How to Implement PQC in Your Organization
• Why Hybrid Encryption Matters
• IoT and Post Quantum Cryptography