U.S. Executive Order Mandates Transition to Post-Quantum Cryptography

The White House is finalizing an executive order to enforce the migration of federal agencies to post-quantum cryptographic (PQC) standards by specific deadlines. The Office of Management and Budget (OMB) has issued guidance requiring agencies to transition high-impact systems to PQC by 2031 and key establishment by 2030. Covered contractors must also comply with these standards. The order aims to protect against future quantum computers that could break current encryption methods. Agencies are instructed to conduct inventories of their digital networks and report their migration plans within 120 days. The memo emphasizes the need for automation in managing cryptographic transitions. The full migration phase is expected to be completed by 2035. This initiative follows previous recommendations from the National Security Agency regarding quantum-resistant algorithms.

Key Points: • Federal agencies must transition to post-quantum cryptography by 2031. • Covered contractors are required to comply with PQC standards by 2030. • Agencies must report their migration plans to the OMB within 120 days.