Summary
On June 22, 2026, President Trump signed two executive orders aimed at securing the United States against advanced cryptographic threats posed by quantum computing. The orders mandate an accelerated transition to post-quantum cryptography (PQC) across federal agencies and critical infrastructure, and expand federal investment in quantum computing research.
The directives acknowledge the looming threat of “harvest now, decrypt later” attacks — where adversaries collect encrypted data today with the intent to decrypt it once quantum computers become powerful enough. Federal agencies are now required to inventory their cryptographic systems, prioritize the migration of sensitive data to quantum-resistant algorithms, and report progress on defined timelines.
The orders also direct the advancement of American AI innovation specifically for cybersecurity and critical infrastructure protection, recognizing the intersection of quantum capabilities and AI-driven threats.
Sources
- White House Fact Sheet — Trump secures the nation against advanced cryptographic attacks
- SecurityWeek — Trump signs executive order on PQC migration
- Nextgov — Trump signs 2 orders to prepare US for quantum future
Commentary
Regardless of where you stand politically, executive-level attention to post-quantum cryptography is overdue. The “harvest now, decrypt later” threat is real and widely acknowledged — nation-states are almost certainly stockpiling encrypted traffic for future decryption. Mandating federal PQC migration sends a signal to the private sector that the transition timeline is shorter than many assumed.
The practical challenge is enormous. Most organizations don’t even have a complete inventory of where their cryptographic dependencies live, let alone a migration plan. These EOs add urgency, but the real test will be in execution — whether agencies can actually hit their milestones or whether this becomes another well-intentioned mandate that stalls in procurement and legacy system inertia.