The quantum computing threat to modern encryption just got its most concrete federal deadline yet. President Trump signed two executive orders on June 23 mandating that federal agencies and contractors migrate their systems to post-quantum cryptography, with high-value assets required to use new encryption standards for key establishment by December 31, 2030.
What the executive orders actually require
The two orders, designated EO 14409 and EO 14411, attack the quantum problem from different angles. EO 14409 is the enforcement mechanism, establishing specific deadlines for transitioning federal systems to NIST-approved post-quantum cryptography standards. EO 14411 focuses on accelerating US quantum technology development more broadly.
Here’s the timeline baked into EO 14409. NIST must initiate a post-quantum cryptography migration pilot by December 31, 2027. Federal agencies must complete migration of high-value assets to PQC standards for key establishment by December 31, 2030. Digital signature migration gets an extra year, with a deadline of December 31, 2031.
The orders specifically cite the “harvest now, decrypt later” threat. This is the scenario where adversaries collect encrypted data today, stockpile it, and wait until sufficiently powerful quantum computers exist to crack the encryption retroactively.
