Trump orders federal shift to post-quantum cryptography by 2031

President Donald Trump signed Executive Orders 14409 and 14411 directing federal agencies to migrate to post-quantum cryptography (PQC). The orders set deadlines for implementing PQC key establishment by Dec. 31, 2030, and PQC digital signatures by Dec. 31, 2031.

Executive Order 14409, titled “Securing the Nation Against Advanced Cryptographic Attacks,” requires agencies to move key information systems and high-value assets to National Institute of Standards and Technology (NIST)-approved Federal Information Processing Standards for PQC. The order instructs the Secretary of Commerce, through the NIST director, to start a pilot migration on a subset of NIST-owned or -operated systems within 180 days and to complete that pilot no later than Dec. 31, 2027.

The orders require agencies to inventory cryptographic assets, assess migration risks, and coordinate technical guidance and timelines with NIST. Agencies must report progress under procedures set by the administration and work with NIST on standards, testing and best practices for secure migration.

Executive Order 14411, “Ushering In the Next Frontier of Quantum Innovation,” directs agencies to update the national quantum strategy and support development of quantum hardware, algorithms and workforce training. The order establishes the Quantum Computer for Application Development and Discovery Science (QC-ADDS) effort to build quantum systems intended to support scientific research. It also directs the relevant cabinet secretary to identify at least three next-generation quantum sensor projects to prioritize for fielding by Sept. 30, 2028, and to report on those projects within 60 days.

The orders cite the risk posed by large-scale quantum computers to current public-key systems. The orders state: “the advent of large-scale quantum computers, particularly in the hands of adversaries, will pose a significant threat to widely used cryptographic security systems” and warn that adversaries could collect encrypted data now and decrypt it later once quantum machines are capable.

Industry estimates and technical studies have raised concerns about the impact on cryptocurrencies and other long-lived encrypted data. Some industry analyses put the potential inflection point for quantum machines to break modern encryption as early as 2030 and estimate that millions of bitcoin are stored in addresses that could be vulnerable to future quantum attacks. Developers for major blockchains have launched efforts to assess and reduce quantum risks to wallets and transaction signatures.

Post-quantum cryptography uses mathematical algorithms designed to resist quantum attacks. Key establishment methods let two parties create shared keys for encryption, while digital signatures verify identity and transactions. The orders set separate deadlines because replacing signature schemes typically requires broader changes to software and protocols in widely used systems.

The administration frames the directives as steps to protect sensitive information and to coordinate federal work with industry and academic partners. The pilot project is intended to test migration methods, identify technical challenges and inform wider deployment across federal agencies.