Cyber Risks · The Hacker News

Trump Order Sets 2030 Deadline for Federal Post-Quantum Crypto Migration

Summary: President Trump signed executive order 14409 on June 22, setting deadlines for federal agencies to move high-value assets and high-impact systems to post-quantum cryptography: key establishment by December 31, 2030, and digital signatures by December 31, 2031, with national security systems on a separate track. The order cites the "harvest now, decrypt later" risk and pulls the government's PQC timeline forward four to five years from the 2035 target set by 2022 National Security Memorandum 10, aligning with NIST standards finalized in August 2024 (FIPS 203 ML-KEM, FIPS 204 ML-DSA, FIPS 205 SLH-DSA).

What's compelling: Within 30 days each agency head must name a PQC migration lead who owns the cryptographic inventory, and within 180 days the Federal Acquisition Regulatory Council must propose a rule giving covered contractors until December 31, 2030 to meet NIST's FIPS including the PQC algorithms - so the 2030 date reaches vendors, not just agencies.

Read the original at The Hacker News ↗