Trump signs two quantum executive orders, accelerating federal post-quantum cryptography migration to 2031 and binding contractors to NIST standards
US agencies now have hard deadlines to swap out today's encryption. President Trump signed two quantum executive orders Monday: one funds a government quantum computer, the other speeds federal migration to post-quantum cryptography by 2031. Contractors must meet NIST standards b
US federal agencies and their contractors are now working against fixed deadlines to replace the encryption that protects government systems. On Monday President Trump signed two executive orders on quantum technology, an area the administration had largely kept behind its AI agenda until now. The first order directs federal agencies to invest in quantum research, including building a government-hosted quantum computer and coordinating public-private partnerships. The second focuses on defense: it accelerates the federal migration to post-quantum cryptography, the family of algorithms designed to withstand attacks from future quantum machines. Reporting on the order points to a 2031 target for that migration, with the Office of Management and Budget set to issue guidance and a key-establishment deadline at the end of 2030. Federal contracting rules would require vendors to comply with NIST's cryptographic standards by the end of 2030, and the Commerce Department is tasked with pilot-testing post-quantum algorithms on selected NIST systems by the end of 2027. The orders also turn to national security. The Director of National Intelligence and the Secretary of War are directed to assess the implications of increasingly capable commercial quantum computers, including what they mean for the cryptography migration itself. The concern driving the timeline is the so-called harvest-now-decrypt-later problem, where encrypted data stolen today could be unlocked once quantum hardware matures. For organizations outside government, the deadlines matter because federal procurement standards tend to set the baseline that banks, healthcare providers and critical infrastructure operators eventually adopt. Suppliers to the public sector will need to show a credible path to post-quantum readiness well before the end of the decade.