White House Executive Order 14412 mandates post-quantum cryptography by 2030 for federal systems

The White House has issued Executive Order 14412, 'Securing the Nation Against Advanced Cryptographic Attacks,' setting a December 31, 2030, deadline for federal agencies to transition all high-value assets and high-impact systems to post-quantum cryptography (PQC) for key establishment, and a December 31, 2031, deadline for post-quantum digital signatures and authentication. The order addresses the 'harvest now, decrypt later' threat, where adversaries collect encrypted data today for decryption once quantum computers become powerful enough.

Federal agencies must appoint PQC migration leads within 30 days and submit comprehensive migration plans within 120 days. The FAR Council must publish proposed rules within 180 days requiring federal contractors to comply with NIST-approved PQC standards by end of 2030. Additionally, NIST must pilot PQC migration on its own systems by December 31, 2027, and CISA must develop guidance for a cryptographic bill of materials (CBOM) to improve visibility of cryptographic dependencies across systems.

For enterprise vendors and operators, the order transforms PQC from a research topic into a procurement and compliance mandate. Any organization selling to federal agencies—or sharing infrastructure with them—must now factor PQC readiness into product roadmaps. The aggressive timeline (execution beginning 2027, full implementation 2030–2031) compresses the typical decade-long cryptographic migration cycle, making this a board-level infrastructure priority across energy, financial services, and defense-adjacent industries.