The President signed an executive order directing federal agencies to transition their information systems to post-quantum cryptography. The directive, signed June 22, 2026, and published in the Federal Register on June 25, 2026, requires agencies to upgrade protections for high-value assets and high-impact systems.
According to the order, adversaries could use large-scale quantum computers to break widely used cryptographic security systems. The text states there is a risk that adversaries are collecting United States information now to decrypt it later when quantum computers become operational.
The Office of Management and Budget will issue guidance within 90 days of the June 22, 2026, order requiring agencies to transition their systems. Agencies must transition high-value assets and high-impact systems, excluding National Security Systems, to use post-quantum cryptography for key establishment by Dec. 31, 2030, and for digital signatures by Dec. 31, 2031. Agencies have 30 days from the order date to name a migration lead and must submit a transition plan.
Federal contractors will also face new requirements. The Federal Acquisition Regulatory Council has 180 days from the order date to propose a rule requiring covered contractors to comply with the updated cryptographic algorithms by Dec. 31, 2030. A separate proposed rule within 270 days of the order date will require contractors to implement vulnerability disclosure policies that include testing for lack of encryption.
Sector Risk Management Agencies will work with the Cybersecurity and Infrastructure Security Agency to help owners and operators of critical infrastructure transition to the new standards. The order also directs the National Security Agency to report on the transition status of National Security Systems within 180 days of the order and annually thereafter.
The National Institute of Standards and Technology will provide agencies with ongoing comprehensive technical guidance. Within 180 days of the order, the institute will initiate a pilot project for migration on its own systems. The order states the Department of Commerce will bear the costs for publishing the document.