// definition
Cryptographic agility
The ability to change cryptographic mechanisms
Short definition
The ability to replace or adapt cryptographic algorithms across protocols, software, hardware, firmware and infrastructure while preserving security and ongoing services. Putting it into practice requires accounting for dependencies between components and how they can be updated.
risk atlas
Knowledge map
Intuition
Changing an algorithm may also require changes to the protocol, software and equipment that use it.
Related analyses
- Quantum threat: Washington’s race to change its digital locksInventories, deliverable versions and dependencies in post-quantum migration.
Primary sources
- NIST CSWP 39upd1, cryptographic agilityJune 29, 2026 update: definition and adaptation of mechanisms across software, hardware, protocols and infrastructure.