Post-quantum cryptography (PQC) is no longer a forward-looking concern confined to research labs. It is now a pressing operational priority across the federal government. With standards finalized, procurement guidance emerging, and early deployments underway, agencies are moving decisively from planning to execution.
Quantum computing allows computers to process certain types of information much more efficiently than traditional computing methods, because a quantum bit (qubit) can represent a 0, a 1, or both at once. By combining multiple qubits, quantum computing can take a different—and often much faster—approach to certain types of processing and problem solving. In addition to the great advantage this presents, the greater speed and efficiency also introduce incredible risk. Current encryption methods were built to be difficult for standard computers to break, but with the introduction of quantum computing power, such complex equations can be broken in a matter of days or even hours.
This risk is already being considered, even before the first quantum computers come online. Bad actors could be harvesting encrypted data today and holding onto it, so that once they have quantum power, they can quickly decrypt and use that data.
To meet the reality of a post-quantum future, legislation, mandates, and pilots are in process across government.
Governing toward a PQC future
The cybersecurity Executive Order issued in June of 2025 mandated that agencies shift most of their high-value systems and devices to post-quantum encryption by 2035. To ensure agencies have the budget and guidelines to meet this mandate, the House and the Senate are moving forward with legislation.
The National Quantum Initiative Act (NQI) was first passed in 2018, and many of its provisions expired in the fall of 2023. The Government Accountability Office (GAO) issued a report in March of 2026 that outlined needed updates to the NQI to enhance its efficiency and improve oversight efforts. The House and the Senate have both drafted reauthorization bills to align agency efforts with the technical and threat reality.
Both bills reinstate the National Quantum Advisory Committee, a panel of technology and security experts that advises the U.S. government on quantum technology strategy. The House bill tasks the National Institute of Standards and Technology (NIST) with helping set standards for new Quantum Information Science Technologies (QUIST) technologies and conducting an analysis that can promote the deployment of post-quantum cryptography standards.
The Senate version includes over half a dozen amendments to help accelerate the adoption of guidance and applications, including improving the coordination between the Department of Energy and the National Science Foundation; establishing a Manufacturing USA institute for quantum manufacturing that can determine the capabilities necessary to support quantum development; and providing support for quantum testbeds that can hasten quantum information science and technology prototypes and scale-up for industry partners.
Buying PQC
The Cybersecurity and Infrastructure Security Agency has released a list of technology product categories that are expected to support PQC standards. These include cloud services, web software, networking hardware and software, and endpoint security. Products in these categories must demonstrate quantum readiness in order to compete for federal business, which means compliance with several Federal Information Processing Standards—FIPS 203, FIPS 204, and FIPS 205.
PQC in Practice
Agencies across government are working to comply with mandates and legislation, reviewing the current cryptographic state of technologies and systems, and making plans for PQC updates.
U.S. Customs and Border Protection (CBP) is focusing on defending against attempts to harvest data now for later quantum decryption. At the same time, it is looking to employ quantum computing for operations that include improving communications tower placement, so that the agency can exchange data more efficiently with its officers and agents on the ground.
The Federal Aviation Administration (FAA) has asked private sector companies for input on the buildout of its defenses against cyber and quantum threats. They are looking for help with penetration testing, vulnerability evaluations, and incident response coordination (among other tasks), to strengthen the defenses of the National Airspace System and Air Traffic Control.
PQC Adoption Resources
To stay on top of PQC developments in government, check out these resources from GovWhitePapers and GovEvents:
- Government Readiness for Quantum Computing and PQC (white paper) – Quantum computing is moving from theory to practice, reshaping how governments prepare for the future. Agencies are exploring how quantum can optimize logistics, enhance defense readiness, and secure communications while also confronting the urgent need for post-quantum cryptography.
- Quantum Computing (white paper) – Quantum computers have the potential to revolutionize science and industry—but they also pose a serious threat to the cryptographic systems that protect our nation’s sensitive data. This GAO testimony highlights how a coordinated federal strategy is urgently needed to address this looming cyber risk.
- Quantum is Coming: 5 Realities Shaping the Race to Advantage (white paper) – Organizations are approaching a pivotal shift as quantum computing moves toward practical advantage. Based on global executive research, this report identifies five realities shaping adoption: readiness matters as much as technology maturity, diversified use-case portfolios outperform single bets, AI and quantum amplify each other, talent gaps will widen, and governance must be embedded early.
- Quantum Speaker Series: The Center for Quantum Technologies (CQT): An Industry-Academia Partnership for Advancing Quantum Frontiers (June 16, 2026; online) – In partnership with industrial and government members, the CQT researchers will use their expertise in quantum science and engineering to develop and transfer foundational knowledge into industry-friendly quantum devices, systems, and algorithms with enhanced functionality and performance.
- Shift Happens (July 14, 2026; Washington, DC) – Government and industry leaders examine what’s changing in how agencies fund, buy, secure, authorize, and scale technology—and what those shifts mean in practice.
Search GovWhitePapers and GovEvents to find even more details on PQC efforts in government.
