Algorithms: ML-KEM-1024 for key establishment, ML-DSA-87 for signatures, LMS or XMSS (single-tree forms only, per the 2024 FAQ) for software and firmware signing, AES-256 and SHA-384 or SHA-512. Smaller parameter sets such as ML-KEM-768 or ML-DSA-65 do not qualify.
Timeline by category ("support and prefer" by, "exclusively use" by): software and firmware signing 2025 and 2030; web browsers, servers and cloud services 2025 and 2033; traditional networking equipment such as VPNs and routers 2026 and 2030; operating systems 2027 and 2033; niche equipment 2030 and 2033; custom and legacy applications updated or replaced by 2033. New national-security acquisitions must support CNSA 2.0 from 1 January 2027.
CNSA 2.0 applies directly only to national security systems, but vendors serving them (HSMs, VPNs, firmware supply chains) implement it broadly, which drives commercial support.