War Department Details Post-Quantum Cryptography Roadmap

The U.S. War Department has released its first enterprise-wide strategy to transition military systems to post-quantum cryptography (PQC) to counter the threat of future quantum computers. The roadmap sets firm deadlines to secure high-impact national security systems by 2030 and the broader force by 2031, following executive orders on quantum innovation. This transition is vital for the quantum computing sector as it necessitates a massive overhaul of cryptographic infrastructure to prevent adversaries from decrypting sensitive data.

The Pentagon’s new strategy aims to deploy quantum-resistant cryptography across military networks, command-and-control systems, and weapons platforms to mitigate the existential threat quantum computing poses to operations. Pentagon CIO Kirsten Davies and Secretary Pete Hegseth emphasized that impenetrable networks are essential for maintaining a dominant military force, particularly for the authorization of nuclear weapons and coordinated maneuvers. The strategy sets a 2030 deadline for high-impact national security systems and a 2031 deadline for the broader force, responding directly to President Donald Trump’s June 22 executive orders regarding quantum innovation and national security.

Transitioning to PQC is expected to take years of testing and modernization, particularly for the department’s public key infrastructure (PKI), which serves as the foundation for digital identity. DISA PAE Cyber Brian Hermann noted that the drive to accelerate adoption starts with PKI, though many organizations within the department have yet to realize their specific roles in this migration. Experts like Prathibha Rama of the Johns Hopkins University Applied Physics Laboratory warned that other nations could gain a security head start if the U.S. lags in PQC adoption. DISA DODNet Chief Engineer Mike Butler added that early prototyping at TechNet Cyber 2026 has already indicated that requirements will likely evolve as the department learns more about defensive cyber operations in a quantum environment.

Beyond software, the roadmap calls for a new generation of High Assurance End Cryptographic Units and embedded tactical encryption modules to secure battlefield communications, satellite networks, and operational technology. The strategy also introduces centralized governance to streamline procurement and leverage the department's buying power to encourage the commercial market to adopt quantum-resistant technologies. Defense contractors are specifically warned to prepare for future Federal Acquisition Regulation (FAR) requirements, as the military begins to inventory cryptographic capabilities across its entire ecosystem to ensure compliance with new PQC standards.