Securing the Nation Against Advanced Cryptographic Attacks

Key Points

• Trump signed an executive order requiring federal agencies to upgrade their encryption systems to protect against future quantum computers that could break today's security. The order warns that adversaries may already be collecting encrypted U.S. data now, planning to decrypt it once quantum computers are powerful enough.
• Every agency must name a leader for this transition within 30 days. Their most critical systems must switch to new quantum-resistant encryption for digital keys by the end of 2030 and for digital signatures by the end of 2031.
• Private companies that do business with the federal government will also face new requirements. The Federal Acquisition Regulation will be updated to require covered contractors to use quantum-resistant encryption standards by December 31, 2030.
• Government agencies that oversee critical infrastructure sectors will help private operators of things like power grids and water systems develop their own plans to switch to quantum-safe encryption.
• NIST will run a pilot project to test the migration on its own systems, due by the end of 2027. It will also speed up its process for validating cryptographic tools so agencies and contractors can adopt approved products faster.