Presidential Order: Transition to Post‑Quantum Cryptography — Keys 2030, Signatures 2031

Colleagues, note: the US has issued an order setting firm deadlines to migrate to post‑quantum cryptography (PQC).

- Keys: 31.12.2030; signatures: 31.12.2031; national classified systems: separate track.
- 30 days: appoint PQC migration lead; 90 days: OMB will require inventory and plans; NIST will pilot until 31.12.2027.
- Contractors: expect a FAR rule mandating FIPS/PQC compliance by 2030 and inclusion of crypto in vulnerability disclosure programs.
- CISA and NIST to publish a minimal crypto CBM within 270 days — a baseline for crypto agility.

Why it matters: the “collect now, decrypt later” risk makes deadlines real; without an inventory, migration is impossible.

How do you plan to align systems and vendors?

#cybersecurity #PQC #NIST