\n\n
Key developments: A new GAO report reveals that 23 of 24 U.S. federal agencies have not completed basic steps—inventorying vulnerable systems, budgeting, and testing—needed for a quantum‑resistant transition, leaving critical data exposed to future quantum attacks. Meanwhile, NIST’s August 2024 release of the first three PQC standards (ML‑KEM, ML‑DSA, SLH‑DSA) and the March 2025 addition of HQC give the industry concrete algorithms to adopt. Private sector actors are moving faster: Google aims to finish its PQC migration by 2029, Cloudflare reports over 50% of its traffic already uses post‑quantum encryption, and the EU plans to migrate high‑risk use cases by 2030. Hybrid classical‑PQC schemes are becoming the de‑facto strategy across 5G, IoT, VPN and automotive networks, as highlighted in a systematic review of transport‑layer protocols.
Why it matters: The gap between government readiness and private‑sector deployment creates a security asymmetry—federal data could be harvested now and decrypted later once quantum computers mature, while commercial networks already benefit from quantum‑resistant protections. NIST’s standards and the increasing availability of PQC‑enabled services (e.g., AWS KMS, Microsoft TLS pilot) reduce technical barriers, but without inventories and funding estimates, agencies risk missing imminent executive‑order deadlines (key‑establishment by 2030, signatures by 2031) and the broader 2035 deprecation timeline.
What to watch next: • Follow GAO’s recommendations as agencies begin inventorying and budgeting—success will be measured by how many complete all three steps.
• Track the rollout of HQC and other backup KEMs, which will diversify algorithmic risk.
• Monitor industry pilots (Microsoft’s PQC TLS pilot, Cloudflare’s certificate authority) for performance data that could inform federal procurement.
• Watch EU and other governments’ roadmaps for converging deadlines around 2030, which may pressure U.S. agencies to accelerate.
Overall, while the U.S. government acknowledges the quantum threat, recent audits show it is lagging behind a rapidly mobilising private sector that is already integrating NIST‑standardized post‑quantum cryptography into global internet traffic. [[1, 2, 3, 4, 5]]