Article

The ITI Normative Instruction No. 35, effective January 30, 2026, updates Brazil's Public Key Infrastructure (ICP-Brasil) to include post-quantum cryptographic algorithms like ML-DSA and ML-KEM. This marks a fundamental shift from a reactive to a proactive security model, ensuring resilience against future quantum computing threats.

The update also incorporates modern elliptic curves and formalizes new digital certificate types. This change requires organizations to adapt their cryptographic strategies, especially those dealing with sensitive data. The instruction highlights Brazil's commitment to aligning with global cryptographic standards, enhancing both digital trust and technological sovereignty.