What does 'update path for deprecation' mean in cryptographic algorithm selection under Annex F?

What does 'update path for deprecation' mean in cryptographic algorithm selection under Annex F?

• A. How to retire deprecated algorithms and migrate to stronger ones in a controlled way
• B. Update path means ignoring deprecated algorithms
• C. Update path means exporting algorithms to vendors
• D. Update path means applying patches to software only

Answer: (A)

The idea you’re being tested on is planning how to retire weaker, deprecated cryptographic algorithms and move to stronger ones in a controlled, structured way. In Annex F, labels or choices about an update path aren’t just about picking algorithms; they require a documented plan for phasing out what’s outdated, setting timelines, coordinating changes across systems, and validating security during the transition. This is about governance and the practical steps to migrate safely, not about ignoring deprecated options, exporting algorithms to vendors, or patching software in isolation. The best choice captures that idea: retire deprecated algorithms and migrate to stronger ones in a controlled manner.

The idea you’re being tested on is planning how to retire weaker, deprecated cryptographic algorithms and move to stronger ones in a controlled, structured way. In Annex F, labels or choices about an update path aren’t just about picking algorithms; they require a documented plan for phasing out what’s outdated, setting timelines, coordinating changes across systems, and validating security during the transition. This is about governance and the practical steps to migrate safely, not about ignoring deprecated options, exporting algorithms to vendors, or patching software in isolation. The best choice captures that idea: retire deprecated algorithms and migrate to stronger ones in a controlled manner.