tech
White House drastically shortens deadline for dropping quantum-vulnerable crypto
Order warns of national security risks if post-quantum cryptography isn’t adopted in time.
TL;DR
- The White House has issued an executive order to drastically shorten the deadline for government agencies to adopt quantum-resistant encryption systems.
- New deadlines for transitioning to post-quantum cryptographic key establishment schemes are December 31, 2030, and for digital signature schemes, December 31, 2031.
- The shortened timeline is a response to recent research suggesting that the development of cryptographically relevant quantum computers is progressing faster and at a lower cost than anticipated.
- The order aims to protect sensitive government, military, and financial data from being decrypted by adversaries once powerful quantum computers are operational.
- Key initiatives include establishing a government-wide transition coordination process, encouraging international adoption of NIST-standardized PQC algorithms, and issuing guidance on cryptographic bill of materials (CBOM).
- New procurement rules are expected to require "covered contractors" to meet the same quantum-readiness deadlines and implement vulnerability disclosure policies.
- Estimates for the number of qubits required to break current encryption methods like RSA have steadily decreased over the years, increasing the urgency for this transition.
- A separate executive order directs a national effort to develop powerful quantum computers in partnership with private industry.