US accelerates PQC migration across federal agencies

With an Executive Order issued on 22 June 2026, the United States has tightened the timeline for the transition to Post-Quantum Cryptography. Titled „Securing the Nation Against Advanced Cryptographic Attacks“ , it requires federal agencies to move more quickly in preparing particularly sensitive systems for quantum-safe cryptography.

The requirements initially apply to Federal Information Systems, specifically High Value Assets and High Impact Systems operated by US federal agencies. These systems are to use PQC for key establishment by 31 December 2030. For digital signatures, the deadline is 31 December 2031. This shortens the previous target horizon for these particularly critical systems by around four years. National Security Systems are excluded from this section; a separate reporting process is planned for them.

For companies, this does not create a general direct migration obligation. Even so, the Executive Order sends an important signal to the market. It shows that PQC is increasingly moving into concrete implementation plans, procurement processes and technical requirements. This is particularly relevant for organisations working with US federal agencies, operating as part of international supply chains or running critical infrastructure.

In addition, CISA and NIST are expected to publish public guidance on the minimum components of a Cryptographic Bill of Materials. This brings the systematic inventory of cryptographic assets further into focus. Companies need to know which algorithms, keys, certificates and cryptographic mechanisms are used in their systems before they can begin a controlled migration to PQC.

The new Executive Order highlights a key development: Post-Quantum Cryptography is no longer an abstract topic for the future. Although the specific deadlines initially apply to US federal agencies, pressure is growing on companies to make their cryptographic dependencies transparent and prepare their crypto-agility strategically. essendi it supports companies on this path: from creating a crypto inventory with essendi cd and deploying PQC-ready solutions to preparing strategically for the post-quantum era.