Draft executive order would set deadlines for digital signature and key quantum encryption

A new executive order is being prepared to drive federal agencies toward post-quantum cryptographic standards with defined deadlines. The Office of Management and Budget would issue guidance and timelines for migrating high-impact systems to encryption intended to resist code-breaking from a future fully operational quantum computer. Agencies would be required to migrate high-value assets, excluding national security systems. The order would require digital signature transitions for high-impact systems and high-value assets to a post-quantum standard by December 31, 2031, and post-quantum cryptography for key establishment by December 31, 2030. Covered contractors would also need to comply with National Institute of Standards and Technology post-quantum cryptography standards by 2030.

"The current version tasks the Office of Management and Budget with issuing guidance and deadlines for transitioning high-impact systems to encryption standards intended to withstand code-breaking powered by an eventual fully operational quantum computer. The person confirmed that all agencies must migrate their high-value assets, apart from national security systems."

"The draft document would require all agencies to transition their digital signatures for high-impact systems and high-value assets to a PQC standard by Dec. 31, 2031, and to use post-quantum cryptography for key establishment by Dec. 31, 2030, according to sections viewed by Nextgov/FCW."

"Digital signatures are software tools that authenticate user identity for secure access into digital environments. Key establishment is the process of securing data by generating a unique digital code, or a cryptographic key, for specific parties to provide them secure access. Key establishment and exchange allows the parties to then securely encrypt and decrypt data."

"The draft order also gives "covered contractors" working with federal agencies a 2030 deadline to comply with the PQC standards developed by the National Institute of Standards and Technology, the person familiar said, noting that the document is expected to be released sometime this week."

Read at Nextgov.com