Ethical Hacking News
The White House has drastically shortened the deadline for adopting quantum-resistant encryption systems to protect against growing national security risks. The new deadline requires computing systems for "high-value assets" and "high-impact systems" to transition to post-quantum cryptographic key establishment schemes by December 31, 2030, and to quantum-safe digital signature schemes by December 31, 2031.
The US government has set a new deadline of December 31, 2030, for government agencies and organizations to adopt new quantum-resistant encryption systems. The deadline is about five years sooner than the previous one, which was set by the National Security Agency (NSA) between 2030 and 2033. Many organizations now have until 2035 to complete the transition, but some companies like Google and Cloudflare have tightened their timelines to 2029. The executive order establishes a government-wide transition coordination process to oversee the implementation of post-quantum cryptographic algorithms. New procurement rules require "covered contractors" to meet the same quantum-readiness deadlines and implement vulnerability disclosure policies.
The White House has drastically shortened the deadline for government agencies and organizations to adopt new quantum-resistant encryption systems, as the federal government seeks to protect decades' worth of secrets belonging to militaries, banks, governments, and most individuals on Earth. The executive order, titled "Securing the Nation against Advanced Cryptographic Attacks," requires computing systems for "high-value assets" and "high-impact systems" to transition to post-quantum cryptographic key establishment schemes by December 31, 2030, and to quantum-safe digital signature schemes by December 31, 2031.
This new deadline, which is about five years sooner than the previous one, comes on the heels of recent research showing that the resources and cost for building a cryptographically relevant quantum computer are far less than previous consensus estimates. In response, Google, Cloudflare, and other companies have recently tightened their timelines for moving off vulnerable systems to 2029.
The executive order states that "the advent of large-scale quantum computers, particularly in the hands of adversaries, will pose a significant threat to widely used cryptographic security systems." The National Security Agency (NSA) had previously set a timeline for national security systems to be quantum-ready between 2030 and 2033. However, many organizations now have until 2035 to complete the transition, which has been shortened by four to five years.
Brian LaMacchia, a cryptography engineer who oversaw Microsoft's post-quantum transition from 2015 to 2022, notes that "the transition timeline for these systems just got shortened by 4-5 years (from 2035 to 2030/2031)." He adds that this is a significant shortening of the transition timeline and follows similar timeline revisions from Google and Cloudflare.
The executive order also establishes a government-wide transition coordination process, led by the Director of the Office of Management and Budget and the National Cyber Director. Each federal agency will designate a point person responsible for reporting quantum transition progress to them. The order also directs the Secretary of State to work with various agencies to identify and engage foreign governments and industry groups in key countries to encourage their transition to post-quantum cryptographic algorithms.
Furthermore, the executive order establishes new procurement rules that appear to be aimed at requiring "covered contractors" to meet the same quantum-readiness deadlines and implement vulnerability disclosure policies. Jordan Kenyon, senior quantum scientist at Booz Allen, notes that "critical infrastructure owners and operators can now expect support in developing their PQC migration plans." However, covered contractors could face future requirements from proposed rules to incorporate post-quantum compliant algorithms required by FIPS.
The White House has also published a second executive order directing the federal government, in partnership with private industry, to support quantum computing. Among other things, it established a "national effort" to develop the world's first quantum computer powerful enough to "initiate the era of quantum-enabled scientific discovery."
In March, researchers discovered a way to break ECC-256, used to secure the bitcoin and ethereum blockchains, using only 30,000 physical qubits in 10 days. The same month, a Google research team developed two quantum circuits that could solve the elliptic-curve discrete logarithm problem using roughly 500,000 physical qubits.
In 2012, estimates suggested breaking a 2048-bit RSA key would require a billion physical qubits. By 2019, the estimate was lowered to 20 million physical qubits. The steady march of progress in quantum computing research has led organizations with the most to lose to err on the side of "Q Day," the day a cryptographically relevant quantum computer arrives, coming sooner rather than later.
Two of the most widely used public key cryptography algorithms—RSA and elliptic curve cryptography—are based on factoring composites and the discrete logarithm, respectively. These mathematical problems are simple to solve in one direction and nearly impossible in the other. A quantum computer with sufficient resources can run Shor's algorithm to solve these problems in polynomial time, far faster than the exponential time provided by today's classical computers.
Contrary to what many people assume, substituting quantum vulnerable algorithms for post-quantum cryptographic ones is anything but a drop-and-replace exercise. Public key sizes for ML-KEM, one of the replacements for RSA, are roughly three times bigger. The difficulty and scale of the work ahead is why the federal government is taking this move so seriously.
Related Information:
https://www.ethicalhackingnews.com/articles/The-White-House-Shortens-Deadline-for-Quantum-Resistant-Encryption-Systems-Amidst-Growing-National-Security-Risks-ehn.shtml
https://arstechnica.com/information-technology/2026/06/executive-order-bumps-up-deadline-to-move-off-quantum-vulnerable-crypto/
https://thehackernews.com/2026/06/trump-order-sets-2030-deadline-for.html
Published: Tue Jun 23 18:04:33 2026 by llama3.2 3B Q4_K_M
