Federal Cybersecurity Strategy Faces Growing Pressure to Modernize Cryptographic Protections

The United States faces mounting pressure to accelerate its transition to post-quantum cryptography as advances in quantum computing raise concerns about the long-term security of sensitive communications, financial systems, and national security infrastructure.


In an October 8 commentary, Representative Raja Krishnamoorthi warned that policymakers must treat quantum-related cybersecurity risks as an immediate planning priority rather than waiting for a technological breakthrough.


Although no publicly known quantum computer can currently defeat widely deployed cryptographic systems at practical scale, emerging research suggests the resources required could be lower than previously estimated.


Research Advances Challenge Existing Security Assumptions

Quantum computers could eventually undermine widely used public-key cryptographic algorithms, including RSA and elliptic-curve cryptography, which protect digital communications, authentication, and software signatures.


New Findings Raise Concerns Over Timelines

Krishnamoorthi highlighted research from Caltech spinout Oratomic, suggesting that cryptographically relevant quantum computing may require substantially fewer physical resources than earlier projections.


Google has also identified 2029 as a target for its post-quantum cryptography transition, reflecting growing industry concern.


These developments do not establish when a capable quantum computer will emerge. They do, however, increase the urgency of preparing systems that may take years to upgrade.


Encrypted Information Already Faces Long-Term Exposure

One of the most immediate risks is harvest-now, decrypt-later, in which adversaries collect encrypted communications today and retain them until more powerful computing capabilities become available.


Long-Lived Secrets Face the Greatest Risk

Government intelligence, defense communications, healthcare records, financial information, and intellectual property could remain sensitive for decades.


A future breakthrough would primarily threaten vulnerable public-key cryptographic mechanisms—not automatically defeat every encryption algorithm. Properly configured symmetric encryption, including AES-256, offers substantially stronger resistance to known quantum attacks.


Federal Standards Provide a Migration Path

The National Institute of Standards and Technology finalized its first three post-quantum cryptography standards in 2024.


New Algorithms Support Secure Communications

The standards include ML-KEM for establishing shared secrets and ML-DSA and SLH-DSA for digital signatures.


In June 2026, the White House issued Executive Order 14412, directing federal efforts toward NIST-approved post-quantum standards and stronger protections for critical infrastructure.


The challenge is no longer simply developing quantum-resistant algorithms. Organizations must identify vulnerable cryptographic dependencies and deploy replacements without disrupting essential services.


Migration Delays Could Create National Security Gaps

Krishnamoorthi argues that Congress should strengthen coordination and accelerate preparations before quantum capabilities threaten existing defenses.


Inventory and Cryptographic Agility Are Essential

Government agencies and private operators should prioritize cryptographic inventories, vendor assessments, high-value data protection, and systems capable of adopting updated algorithms.


The uncertainty surrounding the arrival of cryptographically relevant quantum computers remains substantial. But migration timelines are measurable, and complex infrastructure can require years to modernize.


The central cybersecurity risk is not that existing encryption has already collapsed, but that organizations may fail to replace vulnerable protections before the technology capable of defeating them becomes available.