Tech

White House slashes quantum crypto transition deadline by five years

The administration warns of 'harvest now, decrypt later' threats as research suggests quantum capabilities are advancing faster than previously projected.

Author
Owen Mercer
Markets and Finance Editor
Published
Draft
Source: Ars Technica · original
White House drastically shortens deadline for dropping quantum-vulnerable crypto
New executive order mandates post-quantum adoption by 2030 for high-value systems, citing reduced cost estimates for building cryptographically relevant quantum computers.

The White House has issued an executive order titled 'Securing the Nation against Advanced Cryptographic Attacks', drastically shortening the timeline for US government agencies and organisations to transition from quantum-vulnerable encryption to post-quantum cryptographic systems. The directive mandates that computing systems designated as high-value assets and high-impact systems must adopt quantum-resistant key establishment schemes by 31 December 2030 and quantum-safe digital signature schemes by 31 December 2031.

This accelerated schedule represents a reduction of approximately five years compared to previous estimates, which had allowed most organisations until 2035 to complete the transition. The order cites recent research indicating that the resources and cost required to build a cryptographically relevant quantum computer are significantly lower than previously thought, prompting a more urgent response from the federal government.

The administration warns that adversaries may be harvesting encrypted data now with the intent to decrypt it once large-scale quantum computers become operational. The executive order states that the advent of such technology, particularly in the hands of adversaries, poses a significant threat to widely used cryptographic security systems protecting militaries, banks, and government secrets.

Brian LaMacchia, a cryptography engineer who oversaw Microsoft’s post-quantum transition from 2015 to 2022, noted that the new deadlines shorten the transition window for affected systems by four to five years. This shift follows similar timeline revisions announced by technology firms including Google and Cloudflare, which recently tightened their own deadlines for moving off vulnerable systems to 2029.

A second executive order published simultaneously directs the federal government to partner with private industry to support quantum computing development. This includes establishing a national effort to create the world’s first quantum computer capable of enabling scientific discovery, acknowledging the steady march of progress in reducing the qubit requirements needed to break current encryption standards.

Continue reading

More from Tech

Read next: Go Security Lead Argues LLMs Render Confidential Vulnerability Reporting Obsolete
Read next: Dyson slashes prices on vacuums and hair tools for Prime Day
Read next: Microsoft slashes Surface Laptop price by 38 per cent for Prime Day