Trump Order Sets 2030 Deadline for Federal Post-Quantum Crypto Migration
US federal agencies given 2030-2031 deadlines for post-quantum crypto migration.
President Trump signed an executive order setting deadlines for federal agencies to migrate to post-quantum cryptography (PQC) by December 31, 2030, for key establishment and December 31, 2031, for digital signatures. This order addresses the "harvest now, decrypt later" threat and accelerates previous timelines, aligning with NIST's finalized PQC standards.
AI summary of the linked source. Not reviewed by an editor. How this works
Run FIPS 203?
Get an email when a new story names FIPS 203, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonThe executive order acknowledges a critical and growing threat: adversaries are actively harvesting encrypted federal data today with the intent to decrypt it once sufficiently powerful quantum computers become available — a strategy known as 'harvest now, decrypt later.' Current public-key cryptographic standards (e.g., RSA, ECC) will be rendered obsolete by quantum computing advances, exposing decades of sensitive government communications and data. The 2030/2031 deadlines reflect urgency because cryptographic migrations are slow, complex, and require extensive planning, procurement, and testing across sprawling federal infrastructure. Failure to act proactively means sensitive data classified today could be exposed retroactively, making this a present-day risk, not a future one.
What helps against this
How we list vendors- Encryption and key management
Stolen data stays unreadable, and the keys stay under your control.