{"id":30447,"date":"2026-03-04T16:17:01","date_gmt":"2026-03-04T15:17:01","guid":{"rendered":"https:\/\/sits.com\/?p=30447"},"modified":"2026-03-04T16:17:02","modified_gmt":"2026-03-04T15:17:02","slug":"rsa-ecc-nearing-the-finish-line-become-crypto%e2%80%91agile-now","status":"publish","type":"post","link":"https:\/\/sits.com\/en\/blog\/rsa-ecc-nearing-the-finish-line-become-cryptoagile-now\/","title":{"rendered":"RSA & ECC nearing the finish line: Become crypto\u2011agile now"},"content":{"rendered":"

[vc_row][vc_column]

EOL: RSA & ECC<\/h2>[vc_column_text]RSA and ECC have been the backbone of secure internet connections, data encryption, and electronic signatures for decades, but their time is running out<\/strong>. The reason is not a sudden bug or new mathematical methods that could break these algorithms, but physics: a sufficiently large quantum computer can use Shor\u2019s algorithm<\/strong> to efficiently solve both the factoring problem<\/strong> (RSA) and discrete logarithms<\/strong> (ECC).<\/p>\n

Therefore, anyone encrypting data today must assume that attackers may collect it now and decrypt it later (\u201charvest now, decrypt later\u201d). The BSI is consequently introducing, for the first time, a concrete end\u2011of\u2011life date for the sole use of classical asymmetric methods. The details are provided as recommendations in the technical guideline TR-02102-1<\/a> from January 2026.[\/vc_column_text]

<\/div>\n[\/vc_column][\/vc_row][vc_row][vc_column]
\n
\n
\n

\n From 2031: PQC method... <\/h2>\n <\/div>\n
\n <\/div>\n
\n In practical terms, this means that classic RSA or ECC procedures, such as those used today for the secure exchange of cryptographic keys in the context of HTTPS or secure e-mail are only recommended until the end of 2031. For applications with very high protection requirements, the changeover should take place by the end of 2030. <\/div>\n <\/div>\n
\n
\n \"\" <\/div>\n<\/div>\n<\/div>
<\/div>\n[\/vc_column][\/vc_row][vc_row][vc_column]

\u2026 in hybrid form \u2026<\/h3>[vc_column_text]From 2032 onward, classical RSA and ECC methods should be used only in hybrid form together with post<\/strong>\u2011<\/strong>quantum cryptography<\/strong> (PQC). \u201cHybrid\u201d here means that two methods are applied in parallel. In addition to the classical RSA\/ECC methods, modern PQC methods are to be combined.<\/p>\n

The BSI explicitly recommends the hybrid approach because PQC methods, while necessary, have been investigated less than RSA and ECC with respect to implementation security and potential weaknesses to side\u2011channel attacks.<\/p>\n

This is precisely where the organizational challenge lies: migration affects<\/strong> not just a single algorithm but protocols, libraries, certificate chains, device firmware<\/strong>, and often external partners<\/strong> as well. Especially in PKI environments, long migration timelines are realistic because new certificates, policies, HSM support, and rollout windows must align.[\/vc_column_text]

<\/div>\n[\/vc_column][\/vc_row][vc_row][vc_column]

...and from 2035 also for electronic signatures<\/h2>[vc_column_text]The BSI has set a later but also fixed horizon for signatures. According to the current state of knowledge, the sole use of classic RSA\/ECC signature processes will probably only be recommended until the end of 2035<\/strong>. The switch to quantum-safe signatures<\/strong> should be completed by 2035 at the latest. Here, too, the preferred variant is hybrid, for example by combining a classic ECC \/ RSA with a PQC signature, which only counts as valid together.<\/p>\n

With electronically signed documents, the real \u201ccrypto question\u201d is not just the signing today, but above all the subsequent verifiability<\/strong> over many years, often far beyond the life cycle of IT systems. The BSI therefore advises planning future PQC conversions promptly in the event of long-term requirements and, if necessary, securing old documents again by means of re-signing with updated procedures. For this long-term preservation of evidentiary value, the BSI refers to TR-03125<\/a>, which regulates the preservation of evidentiary value of cryptographically signed documents.[\/vc_column_text]

<\/div>\n[\/vc_column][\/vc_row][vc_row][vc_column]

What does this mean for companies today?<\/h2>[vc_column_text]The challenge lies not in the application of the new PQC procedures, but in the inventory<\/strong> of the affected applications and services and in the risk-based assessment<\/strong> of the respective protection requirements and migration complexity<\/strong>. A comprehensive migration project that includes the most important applications and services often takes several years due to dependencies and lifecycles and must therefore be planned at an early stage.<\/p>\n

The procedure is called \u201ccryptoagility<\/strong>\u201d, which the BSI explicitly mentions in TR-02102-1<\/a>. Cryptoagility describes the organizational, technical and procedural ability to flexibly replace or expand cryptographic mechanisms without having to make significant changes to the rest of the overall system. Based on this approach, organizations can meet these challenges formally, efficiently and in a targeted manner.[\/vc_column_text]

<\/div>\n
\n
\n
<\/div>\n \"\"\n <\/div>\n
\n

Implementing PQC migration pragmatically<\/h4>\n
With our proven, practice\u2011tested framework, you can get started quickly: inventory, pilot, hybrid rollout. Let\u2019s discuss your roadmap for the PQC migration.<\/div>\n
<\/div>\n\n
\n
\n \n Get in touch <\/a>\n
<\/div>\n <\/div> \n <\/div>\n <\/div>\n<\/div>[\/vc_column][\/vc_row]<\/p>\n<\/section>","protected":false},"excerpt":{"rendered":"

[vc_row][vc_column][vc_column_text]RSA and ECC have been the backbone of secure internet connections, data encryption, and electronic signatures for decades, but their time is running out. The reason is not a sudden bug or new mathematical methods that could break these algorithms, but physics: a sufficiently large quantum computer can use Shor\u2019s algorithm to efficiently solve both […]<\/p>\n","protected":false},"author":19,"featured_media":27688,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"inline_featured_image":false,"footnotes":"","_members_access_role":[],"_members_access_error":""},"categories":[],"tags":[],"class_list":["post-30447","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry"],"acf":[],"yoast_head":"\nRSA & ECC approaching end of life: Your PQC roadmap | SITS<\/title>\n<meta name=\"description\" content=\"BSI TR\u201102102\u20111: RSA\/ECC have an end\u2011of\u2011life date. Hybrid until 2031, signatures until 2035. What organizations need now for the PQC migration.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/sits.com\/en\/blog\/rsa-ecc-nearing-the-finish-line-become-cryptoagile-now\/\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"RSA & ECC approaching end of life: Your PQC roadmap | SITS\" \/>\n<meta property=\"og:description\" content=\"BSI TR\u201102102\u20111: RSA\/ECC have an end\u2011of\u2011life date. Hybrid until 2031, signatures until 2035. What organizations need now for the PQC migration.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/sits.com\/en\/blog\/rsa-ecc-nearing-the-finish-line-become-cryptoagile-now\/\" \/>\n<meta property=\"og:site_name\" content=\"SITS\" \/>\n<meta property=\"article:published_time\" content=\"2026-03-04T15:17:01+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-03-04T15:17:02+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/sits.com\/wp-content\/uploads\/2025\/11\/Cryptographic-Solutions.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1000\" \/>\n\t<meta property=\"og:image:height\" content=\"1787\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Charlotte Olscha\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Charlotte Olscha\" \/>\n\t<meta name=\"twitter:label2\" content=\"Estimated reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/sits.com\/en\/blog\/rsa-ecc-nearing-the-finish-line-become-cryptoagile-now\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/sits.com\/en\/blog\/rsa-ecc-nearing-the-finish-line-become-cryptoagile-now\/\"},\"author\":{\"name\":\"Charlotte Olscha\",\"@id\":\"https:\/\/sits.com\/en\/#\/schema\/person\/a096e5a6430c2d0f74c324b7c9f47102\"},\"headline\":\"RSA & ECC nearing the finish line: Become crypto\u2011agile now\",\"datePublished\":\"2026-03-04T15:17:01+00:00\",\"dateModified\":\"2026-03-04T15:17:02+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/sits.com\/en\/blog\/rsa-ecc-nearing-the-finish-line-become-cryptoagile-now\/\"},\"wordCount\":810,\"publisher\":{\"@id\":\"https:\/\/sits.com\/en\/#organization\"},\"image\":{\"@id\":\"https:\/\/sits.com\/en\/blog\/rsa-ecc-nearing-the-finish-line-become-cryptoagile-now\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/sits.com\/wp-content\/uploads\/2025\/11\/Cryptographic-Solutions.jpg\",\"inLanguage\":\"en-GB\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/sits.com\/en\/blog\/rsa-ecc-nearing-the-finish-line-become-cryptoagile-now\/\",\"url\":\"https:\/\/sits.com\/en\/blog\/rsa-ecc-nearing-the-finish-line-become-cryptoagile-now\/\",\"name\":\"RSA & ECC approaching end of life: Your PQC roadmap | SITS\",\"isPartOf\":{\"@id\":\"https:\/\/sits.com\/en\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/sits.com\/en\/blog\/rsa-ecc-nearing-the-finish-line-become-cryptoagile-now\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/sits.com\/en\/blog\/rsa-ecc-nearing-the-finish-line-become-cryptoagile-now\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/sits.com\/wp-content\/uploads\/2025\/11\/Cryptographic-Solutions.jpg\",\"datePublished\":\"2026-03-04T15:17:01+00:00\",\"dateModified\":\"2026-03-04T15:17:02+00:00\",\"description\":\"BSI TR\u201102102\u20111: RSA\/ECC have an end\u2011of\u2011life date. Hybrid until 2031, signatures until 2035. What organizations need now for the PQC migration.\",\"breadcrumb\":{\"@id\":\"https:\/\/sits.com\/en\/blog\/rsa-ecc-nearing-the-finish-line-become-cryptoagile-now\/#breadcrumb\"},\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/sits.com\/en\/blog\/rsa-ecc-nearing-the-finish-line-become-cryptoagile-now\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/sits.com\/en\/blog\/rsa-ecc-nearing-the-finish-line-become-cryptoagile-now\/#primaryimage\",\"url\":\"https:\/\/sits.com\/wp-content\/uploads\/2025\/11\/Cryptographic-Solutions.jpg\",\"contentUrl\":\"https:\/\/sits.com\/wp-content\/uploads\/2025\/11\/Cryptographic-Solutions.jpg\",\"width\":1000,\"height\":1787},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/sits.com\/en\/blog\/rsa-ecc-nearing-the-finish-line-become-cryptoagile-now\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Startseite\",\"item\":\"https:\/\/sits.com\/en\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"RSA & ECC nearing the finish line: Become crypto\u2011agile now\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/sits.com\/en\/#website\",\"url\":\"https:\/\/sits.com\/en\/\",\"name\":\"SITS\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\/\/sits.com\/en\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/sits.com\/en\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-GB\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/sits.com\/en\/#organization\",\"name\":\"SITS\",\"url\":\"https:\/\/sits.com\/en\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/sits.com\/en\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/sits.com\/wp-content\/uploads\/2024\/04\/sits-logo-new.svg\",\"contentUrl\":\"https:\/\/sits.com\/wp-content\/uploads\/2024\/04\/sits-logo-new.svg\",\"width\":557,\"height\":322,\"caption\":\"SITS\"},\"image\":{\"@id\":\"https:\/\/sits.com\/en\/#\/schema\/logo\/image\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\/\/sits.com\/en\/#\/schema\/person\/a096e5a6430c2d0f74c324b7c9f47102\",\"name\":\"Charlotte Olscha\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/sits.com\/en\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/c268c10d74bec8f11f59ba984aa26b6d1b8b5a99a5b95547c4db1b486e6a1538?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/c268c10d74bec8f11f59ba984aa26b6d1b8b5a99a5b95547c4db1b486e6a1538?s=96&d=mm&r=g\",\"caption\":\"Charlotte Olscha\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"RSA & ECC approaching end of life: Your PQC roadmap | SITS","description":"BSI TR\u201102102\u20111: RSA\/ECC have an end\u2011of\u2011life date. Hybrid until 2031, signatures until 2035. What organizations need now for the PQC migration.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/sits.com\/en\/blog\/rsa-ecc-nearing-the-finish-line-become-cryptoagile-now\/","og_locale":"en_GB","og_type":"article","og_title":"RSA & ECC approaching end of life: Your PQC roadmap | SITS","og_description":"BSI TR\u201102102\u20111: RSA\/ECC have an end\u2011of\u2011life date. Hybrid until 2031, signatures until 2035. What organizations need now for the PQC migration.","og_url":"https:\/\/sits.com\/en\/blog\/rsa-ecc-nearing-the-finish-line-become-cryptoagile-now\/","og_site_name":"SITS","article_published_time":"2026-03-04T15:17:01+00:00","article_modified_time":"2026-03-04T15:17:02+00:00","og_image":[{"width":1000,"height":1787,"url":"https:\/\/sits.com\/wp-content\/uploads\/2025\/11\/Cryptographic-Solutions.jpg","type":"image\/jpeg"}],"author":"Charlotte Olscha","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Charlotte Olscha","Estimated reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/sits.com\/en\/blog\/rsa-ecc-nearing-the-finish-line-become-cryptoagile-now\/#article","isPartOf":{"@id":"https:\/\/sits.com\/en\/blog\/rsa-ecc-nearing-the-finish-line-become-cryptoagile-now\/"},"author":{"name":"Charlotte Olscha","@id":"https:\/\/sits.com\/en\/#\/schema\/person\/a096e5a6430c2d0f74c324b7c9f47102"},"headline":"RSA & ECC nearing the finish line: Become crypto\u2011agile now","datePublished":"2026-03-04T15:17:01+00:00","dateModified":"2026-03-04T15:17:02+00:00","mainEntityOfPage":{"@id":"https:\/\/sits.com\/en\/blog\/rsa-ecc-nearing-the-finish-line-become-cryptoagile-now\/"},"wordCount":810,"publisher":{"@id":"https:\/\/sits.com\/en\/#organization"},"image":{"@id":"https:\/\/sits.com\/en\/blog\/rsa-ecc-nearing-the-finish-line-become-cryptoagile-now\/#primaryimage"},"thumbnailUrl":"https:\/\/sits.com\/wp-content\/uploads\/2025\/11\/Cryptographic-Solutions.jpg","inLanguage":"en-GB"},{"@type":"WebPage","@id":"https:\/\/sits.com\/en\/blog\/rsa-ecc-nearing-the-finish-line-become-cryptoagile-now\/","url":"https:\/\/sits.com\/en\/blog\/rsa-ecc-nearing-the-finish-line-become-cryptoagile-now\/","name":"RSA & ECC approaching end of life: Your PQC roadmap | SITS","isPartOf":{"@id":"https:\/\/sits.com\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/sits.com\/en\/blog\/rsa-ecc-nearing-the-finish-line-become-cryptoagile-now\/#primaryimage"},"image":{"@id":"https:\/\/sits.com\/en\/blog\/rsa-ecc-nearing-the-finish-line-become-cryptoagile-now\/#primaryimage"},"thumbnailUrl":"https:\/\/sits.com\/wp-content\/uploads\/2025\/11\/Cryptographic-Solutions.jpg","datePublished":"2026-03-04T15:17:01+00:00","dateModified":"2026-03-04T15:17:02+00:00","description":"BSI TR\u201102102\u20111: RSA\/ECC have an end\u2011of\u2011life date. Hybrid until 2031, signatures until 2035. What organizations need now for the PQC migration.","breadcrumb":{"@id":"https:\/\/sits.com\/en\/blog\/rsa-ecc-nearing-the-finish-line-become-cryptoagile-now\/#breadcrumb"},"inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/sits.com\/en\/blog\/rsa-ecc-nearing-the-finish-line-become-cryptoagile-now\/"]}]},{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/sits.com\/en\/blog\/rsa-ecc-nearing-the-finish-line-become-cryptoagile-now\/#primaryimage","url":"https:\/\/sits.com\/wp-content\/uploads\/2025\/11\/Cryptographic-Solutions.jpg","contentUrl":"https:\/\/sits.com\/wp-content\/uploads\/2025\/11\/Cryptographic-Solutions.jpg","width":1000,"height":1787},{"@type":"BreadcrumbList","@id":"https:\/\/sits.com\/en\/blog\/rsa-ecc-nearing-the-finish-line-become-cryptoagile-now\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Startseite","item":"https:\/\/sits.com\/en\/"},{"@type":"ListItem","position":2,"name":"RSA & ECC nearing the finish line: Become crypto\u2011agile now"}]},{"@type":"WebSite","@id":"https:\/\/sits.com\/en\/#website","url":"https:\/\/sits.com\/en\/","name":"SITS","description":"","publisher":{"@id":"https:\/\/sits.com\/en\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/sits.com\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-GB"},{"@type":"Organization","@id":"https:\/\/sits.com\/en\/#organization","name":"SITS","url":"https:\/\/sits.com\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/sits.com\/en\/#\/schema\/logo\/image\/","url":"https:\/\/sits.com\/wp-content\/uploads\/2024\/04\/sits-logo-new.svg","contentUrl":"https:\/\/sits.com\/wp-content\/uploads\/2024\/04\/sits-logo-new.svg","width":557,"height":322,"caption":"SITS"},"image":{"@id":"https:\/\/sits.com\/en\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/sits.com\/en\/#\/schema\/person\/a096e5a6430c2d0f74c324b7c9f47102","name":"Charlotte Olscha","image":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/sits.com\/en\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/c268c10d74bec8f11f59ba984aa26b6d1b8b5a99a5b95547c4db1b486e6a1538?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/c268c10d74bec8f11f59ba984aa26b6d1b8b5a99a5b95547c4db1b486e6a1538?s=96&d=mm&r=g","caption":"Charlotte Olscha"}}]}},"_links":{"self":[{"href":"https:\/\/sits.com\/en\/wp-json\/wp\/v2\/posts\/30447","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/sits.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/sits.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/sits.com\/en\/wp-json\/wp\/v2\/users\/19"}],"replies":[{"embeddable":true,"href":"https:\/\/sits.com\/en\/wp-json\/wp\/v2\/comments?post=30447"}],"version-history":[{"count":1,"href":"https:\/\/sits.com\/en\/wp-json\/wp\/v2\/posts\/30447\/revisions"}],"predecessor-version":[{"id":30448,"href":"https:\/\/sits.com\/en\/wp-json\/wp\/v2\/posts\/30447\/revisions\/30448"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/sits.com\/en\/wp-json\/wp\/v2\/media\/27688"}],"wp:attachment":[{"href":"https:\/\/sits.com\/en\/wp-json\/wp\/v2\/media?parent=30447"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/sits.com\/en\/wp-json\/wp\/v2\/categories?post=30447"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/sits.com\/en\/wp-json\/wp\/v2\/tags?post=30447"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}