Trump has mandated that U.S. federal agencies transition to post-quantum cryptography.
On June 22, the U.S. President signed two executive orders that fundamentally change the country's approach to quantum security and technological development. These are not just bureaucratic maneuvers—they are a clear signal to the entire market: the era of classical cryptography is coming to an end, and the transition to post-quantum standards (PQC) is becoming mandatory.
Cybersecurity: Tight Deadlines for PQC
The first order acknowledges the reality of the "harvest now, decrypt later" threat actively used by foreign adversaries. Federal agencies are required to appoint officials responsible for migrating to PQC within 30 days, and the full transition of key assets to post-quantum algorithms must be completed by December 31, 2030. For digital signatures, the deadline is slightly more lenient—by the end of 2031.
NIST is launching a pilot migration project by 2027, while the Department of Homeland Security and CISA will issue guidance on cryptographic bills of materials to automate risk assessment. Importantly, federal contractors are also required to comply with PQC standards by 2030, creating a powerful market incentive for adoption.
Innovation: Quantum Computers and Sensors
The second order focuses on commercializing quantum technologies. The QC-ADDS initiative aims to create the first quantum computer based at the Department of Energy with access for the scientific community. Simultaneously, five-year plans are being developed for deploying quantum sensors and networks, and the Department of Defense is required to launch at least three projects by September 2028.
To protect against foreign espionage, the FBI is expanding its QCPT counterintelligence activities. The Department of Commerce will analyze supply chains and implement standards in the private sector, using pre-orders and awards to stimulate domestic production of components.
My comment: These orders are not just about protection against future quantum attacks but represent a fundamental shift in regulation. For the crypto industry, this means the time for adaptation is rapidly shrinking. Those already integrating PQC into their protocols will gain a competitive advantage, while others risk being left behind when federal contractors and financial systems fully transition to new standards. The market must act now, not wait for 2030.