Federal Register executive orders — 2026-06-25

Securing the Nation Against Advanced Cryptographic Attacks

By the authority vested in me as President by the Constitution and the laws of the United States of America, it is hereby ordered:

Section 1 . Background and Policy. The advent of large-scale quantum computers, particularly in the hands of adversaries, will pose a significant threat to widely used cryptographic security systems. Ongoing cyber activity against our Nation also presents the risk of adversaries collecting United States information now, and decrypting it later once large-scale quantum computers are operational. In light of these threats, the United States must take steps to strengthen cryptographic protections for the Nation's sensitive data, critical infrastructure, and digital economy.

It is the policy of the United States to safeguard national security and maintain technological leadership by responsibly and effectively executing the transition of Federal information systems to National Institute of Standards and Technology (NIST)-approved Federal Information Processing Standards (FIPS) for Post-Quantum Cryptography (PQC), and to assist critical infrastructure owners and operators with their transitions.

Sec. 2 . Definitions. For purposes of this order:

(a) the term “agency” has the same meaning as it has in 44 U.S.C. 3502(1);

(b) the term “critical infrastructure” has the same meaning as it has in section 1016(e) of the USA Patriot Act of 2001 (42 U.S.C. 5195c(e));

(c) the term “high impact system” means an information system in which at least one security objective (i.e., confidentiality, integrity, or availability) is assigned a FIPS 199 potential impact value of “high”;

(d) the term “high value asset” or “HVA” means Federal information or a Federal information system designated as a high value asset under Office of Management and Budget (OMB) Memorandum M-19-03, “Strengthening the Cybersecurity of Federal Agencies by Enhancing the High Value Asset Program,” or any successor document;

(e) the term “information systems” has the same meaning as it has in 6 U.S.C. 650(14);

(f) the term “National Security Systems” has the same meaning as it has in 44 U.S.C. 3552(b)(6);

(g) the term “post-quantum cryptography” or “PQC” means those cryptographic algorithms or methods that are designed to be resistant to attack by both a quantum computer and a classical computer;

(h) the term “PQC migration lead” means the agency employee or detailee who reports to the agency's chief information officer and is responsible for overseeing agency-wide cryptographic inventory management, developing a prioritized PQC migration plan, and coordinating cross-agency efforts in PQC;

(i) the term “Cryptographic Module Validation Program” has the same meaning as it has in FIPS 140-3, “Security Requirements for Cryptographic Modules,” or any successor policy;

(j) the term “digital signature” has the same meaning as it has in FIPS 186-5, “Digital Signature Standard (DSS),” or any successor policy; and

(k) the term “key establishment” has the same meaning as it has in FIPS 203, “Module-Lattice-Based Key-Encapsulation Mechanism Standard,” or any successor policy.

Sec. 3 . Coordinating the PQC Transition. (a) The Director of OMB and the National Cyber Director, in consultation with the Assistant to the President for National Security Affairs and the Administrator of the Office of Electronic Government, OMB, shall lead the strategic coordination and oversight of the national PQC migration policy and strategy set forth in this order, ensuring its alignment with broader cybersecurity goals.

(b) The Secretary of Commerce, through the Director of NIST, and in consultation with the Director of the National Security Agency (NSA) and the Secretary of Homeland Security, through the Director of the Cybersecurity and Infrastructure Security Agency (CISA), shall provide agencies on an ongoing basis with comprehensive technical guidance on PQC implementation, including best practices in implementation and risk management strategies.

Sec. 4 . Accelerating the PQC Transition. (a) Within 30 days of the date of this order, each agency head shall identify its PQC migration lead and provide the name and contact details of the PQC migration lead to the Director of OMB and the National Cyber Director.

(b) Within 90 days of the date of this order, the Director of OMB shall, in consultation with the Secretary of Homeland Security through the Director of CISA and the National Cyber Director, and consistent with 6 U.S.C. 1526(c), issue guidance requiring each agency to:

(i) review their inventory of HVAs and high impact systems, excluding National Security Systems;

(ii) transition all HVAs and high impact systems to use PQC for key establishment by December 31, 2030;

(iii) transition all HVAs and high impact systems to use PQC for digital signatures by December 31, 2031; and

(iv) develop and submit to the Director of OMB and the National Cyber Director a plan to accomplish this directive.

(c) Within 180 days of the date of this order, the Secretary of Commerce, through the Director of NIST, shall initiate a pilot project for PQC migration on an appropriate subset of information systems owned or operated by NIST, to be completed no later than December 31, 2027.

Sec. 5 . Leading the PQC Transition. (a) All agencies that serve as Sector Risk Management Agencies, as defined by the National Security Memorandum 22 of April 30, 2024 (Critical Infrastructure Security and Resilience) or its successor, shall work with the Department of Homeland Security through the Director of CISA to assist critical infrastructure owners and operators in developing their PQC migration plans.

(b) The Secretary of State shall work with the Director of NIST, the Secretary of Homeland Security, the National Cyber Director, the Secretary of War, and the Director of National Intelligence (DNI) to identify and engage foreign governments and industry groups in key countries to encourage their transition to PQC algorithms standardized by NIST.

(c) Within 180 days of the date of this order and annually thereafter until PQC migration is complete, the Director of the NSA, in his capacity as the National Manager for National Security Systems, shall submit a report to the President, through the Committee on National Security Systems, on the status of PQC migration for agencies that own or operate National Security Systems.

(d) Within 270 days of the date of this order, the Secretary of Homeland Security, through the Director of CISA, and in coordination with the Director of NIST, shall release public guidance describing the agencies' considered view as to the minimum elements for a cryptographic bill of materials. These elements shall enable the automated assessment of the cryptographic assets utilized by a hardware or software element.

Sec. 6 . Procurement. (a) The Director of OMB, the Secretary of War, the Administrator of National Aeronautics and Space Administration, and the Administrator of General Services, in consultation with the Secretary of Homeland Security, the DNI, and the Director of NIST, shall coordinate efforts to identify cost-saving opportunities in implementing the national PQC migration policy and strategy, such as migration of cloud-based technologies, shared procurement of PQC tools, joint training programs, and centralized technical support.

(b) Within 180 days of the date of this order, the Secretary of Commerce, through the Director of NIST, shall, to the extent appropriate and consistent with applicable law, revise the processes used by the Cryptographic Module Validation Program to accelerate validations of cryptographic modules.

(c) Within 180 days of the date of this order, the Federal Acquisition Regulatory Council (FAR Council), in consultation with the Secretary of Homeland Security through the Director of CISA and the Director of NIST, shall publish a proposed rule amending the Federal Acquisition Regulation (FAR) to require covered contractors to comply by December 31, 2030, with NIST's FIPS, including all applicable FIPS incorporating PQC compliant algorithms.

(d) Within 270 days of the date of this order, the FAR Council, in consultation with the Secretary of Homeland Security through the Director of CISA and the Director of NIST, shall publish a proposed rule amending the FAR requirements and contract clauses for contractor vulnerability disclosure programs to ensure that covered contractors implement vulnerability disclosure policies (VDPs), consistent with NIST guidelines, and that VDPs incorporate reports of cryptographic vulnerabilities, including testing for lack of encryption and the use of non-FIPS approved algorithms.

Sec. 7 . General Provisions. (a) Nothing in this order shall be construed to impair or otherwise affect:

(i) the authority granted by law to an executive department or agency, or the head thereof; or

(ii) the functions of the Director of the Office of Management and Budget relating to budgetary, administrative, or legislative proposals.

(b) This order shall be implemented consistent with applicable law and subject to the availability of appropriations.

(c) This order is not intended to, and does not, create any right or benefit, substantive or procedural, enforceable at law or in equity by any party against the United States, its departments, agencies, or entities, its officers, employees, or agents, or any other person.

(d) The costs for publication of this order shall be borne by the Department of Commerce.

Trump.EPS

Ushering in the Next Frontier of Quantum Innovation

By the authority vested in me as President by the Constitution and the laws of the United States of America, it is hereby ordered:

Section 1 . Purpose. America stands at the cusp of a quantum revolution. Quantum information science and technology (QIST) will provide transformational capabilities that will drive American innovation, power economic growth, generate high-paying jobs, and bolster national security. In 2018, I laid the foundation for United States leadership in QIST by signing into law the National Quantum Initiative Act and doubling Federal investment in QIST research and development. Today, as other nations move quickly to challenge American leadership, the United States must take a cohesive, whole-of-government approach to accelerate deployment and commercialization of quantum computing, sensing, and networking.

In addition to continuing trailblazing quantum research, we must act to solidify the Nation's position as the world's QIST superpower and deliver the commercial and research benefits of quantum innovation to the American people. Equally important, we must protect sensitive technologies and work with allies to ensure adversaries cannot use QIST to undermine national security.

Sec. 2 . Policy. It is the policy of my Administration to ensure that the United States maintains a strategic technical advantage in QIST and leads the development of a robust and trusted quantum ecosystem across QIST research, manufacturing, commercialization, and application.

Sec. 3 . Updating the National Quantum Strategy. (a) Within 180 days of the date of this order, the Assistant to the President for Science and Technology (APST), in coordination with the Secretary of War, the Secretary of Commerce, the Secretary of Energy, the Director of National Intelligence (DNI), and the Director of the National Science Foundation (NSF), and in consultation with the Co-Chairs of the National Science and Technology Council Subcommittees on Quantum Information Science (SCQIS) and Economic and Security Implications of Quantum Information Science (ESIX), shall update the National Quantum Strategy (Strategy) with policies intended to support the maturing QIST ecosystem, including promoting commercialization and deployment of QIST, supporting the quantum-enabling technology ecosystem, and encouraging partnerships with United States industry.

(b) Within 30 days of the date of the publication of the updated Strategy, relevant executive departments and agencies (agencies) shall each submit to the APST and the Director of the Office of Management and Budget (OMB) a summary of steps taken to align their processes, policies, and programs with the Strategy.

Sec. 4 . Harnessing Quantum Computing for Scientific Applications. (a) There is hereby established the Quantum Computer for Application Development and Discovery Science (QC-ADDS) Effort, which shall be coordinated by the APST. This national effort shall pursue development of a quantum computer at a scale intended to initiate the era of quantum-enabled scientific discovery, with the intent to deliver at least one such computer to a Department of Energy facility and, to the extent possible, make it available to the scientific community.

(b) The Secretary of War, the Secretary of Commerce, the Secretary of Energy, the DNI, the Director of NSF, and the heads of other relevant agencies as appropriate, in consultation with the Director of OMB, shall ensure that relevant capabilities, manufacturing infrastructure, and expertise are made available to support the QC-ADDS Effort to the extent practicable, and shall deploy these resources towards exploration of quantum-computer-enabled capabilities for commercial, government, and national security applications. Additionally, the APST shall coordinate with the Administrator of the National Aeronautics and Space Administration (NASA), the Director of the National Security Agency (NSA), and the heads of other relevant agencies to identify additional actions to enhance the QC-ADDS Effort.

(c) Within 90 days of the date of this order, the Secretary of Energy, in coordination with the APST and the heads of other relevant agencies, shall identify the technical specifications required for a QC-ADDS to perform transformative scientific applications that are on a path towards economically significant applications and beyond current classical computer capabilities, and shall publicly release a summary of those specifications, as appropriate.

(d) Within 180 days of the date of this order, the Secretary of Energy, in consultation with the Director of OMB, shall explore potential private-sector partnership models to understand the potential cost, scope, and time frame for delivery of at least one QC-ADDS as described in subsection (a) of this section. Further, the Secretary of Commerce shall develop a plan, potentially including advance market commitments, to encourage contributions to the QC-ADDS Effort from commercial quantum computing companies. Finally, the Secretary of War shall establish or designate activities and programs to develop the tools and capabilities necessary to advance readiness for national security applications of quantum computing, potentially including the establishment of a center for such purpose.

(e) To provide for the robust assessment of the QC-ADDS' and other quantum computing systems' capabilities, within 180 days of the date of this order:

(i) the Secretary of Energy, in consultation with the Secretary of War and the Secretary of Commerce, shall establish a national center to develop the tools and capabilities required to accurately assess the performance of quantum computing systems; and

(ii) the Co-Chairs of the ESIX Subcommittee shall recommend to the APST a mechanism to facilitate information-sharing between relevant agencies to improve the Government's ability to assess commercial quantum computing capabilities.

(f) The DNI and the Secretary of War, in coordination with the Co-Chairs of the ESIX Subcommittee and in consultation with the Secretary of State, the Secretary of Commerce, and the Secretary of Energy, shall identify the national security implications of the increasing scale and performance of commercial quantum computers, such as the implications for the migration to post-quantum cryptography.

Sec. 5 . Deploying Quantum-Enabled Sensors and Networks. (a) Within 60 days of the date of this order, the Secretary of War shall identify at least three next-generation quantum sensor projects to prioritize in order to field these sensors by September 30, 2028.

(b) Each of the following heads of relevant agencies shall develop a 5-year plan for advancing quantum sensing and networking as follows:

(i) the Secretary of Commerce shall develop a plan for advancing commercial readiness of quantum sensing, quantum-sensor manufacturing technology, and quantum-network-enhanced timing;

(ii) the Secretary of Energy shall develop a plan for using quantum sensing and imaging to measure and characterize complex systems, and for using quantum networking to enable distributed quantum computing;

(iii) the Director of NSF shall develop a plan for basic science research to identify applications of quantum sensing and networking, develop novel systems-level concepts, and improve QIST manufacturing science; and

(iv) the Administrator of NASA shall develop a plan for developing and extending civilian quantum sensing and networking for space applications.

(c) The heads of relevant agencies shall prioritize research, development, testing, and evaluation of applications and hardware for quantum sensing and quantum networking.

Sec. 6 . Bolstering the Domestic Ecosystem for Quantum Supply Chains. (a) The Secretary of Commerce, in consultation with the Secretary of Energy and the heads of other relevant agencies, shall develop a plan to strengthen the QIST ecosystem through analyzing QIST supply chains, encouraging private sector adoption of QIST-related standards, and supporting research and development pathways that advance quantum-enabling technologies and eliminate QIST manufacturing barriers.

(b) Within 120 days of the date of this order, the Secretary of War, the Secretary of Commerce, the Secretary of Energy, and the Director of NSF shall develop a plan, with coordination from the APST and the Director of OMB, to encourage and partner with the private sector, potentially using prize challenges or advance market commitments, to develop quantum-enabling component technologies in the United States, and to identify any changes to statutory or regulatory authorities required to address quantum-specific market hurdles.

(c) All relevant agencies shall take steps to share, to the maximum extent possible, information regarding quantum computing supply chains, such as that generated by the Defense Advanced Research Projects Agency Quantum Benchmarking Initiative, with the Departments of War, Commerce, and Energy and with the APST and the Assistant to the President for National Security Affairs (APNSA), to inform Government-wide decision making.

(d) Within 180 days of the date of this order:

(i) the Secretary of War, in consultation with the heads of relevant agencies, shall take steps to increase domestic access to Department of War-sponsored QIST-relevant foundry resources, and strengthen efforts, as appropriate, to improve access to critical QIST supply chains; and

(ii) the Director of NSF shall take steps to issue grants for establishing QIST user facilities through the National Quantum and Nanotechnology Infrastructure program.

(e) Within 210 days of the date of this order, to support the reconstitution of the National Quantum Initiative Advisory Committee (NQIAC), as provided in section 104 of the National Quantum Initiative Act of 2018, as amended, and pursuant to Executive Order 14073 of May 4, 2022 (Enhancing the National Quantum Initiative Advisory Committee), the APST shall recommend a revised NQIAC membership list and shall task the NQIAC to develop recommendations for stimulating the development of quantum-enabling technologies in the United States.

Sec. 7 . Protecting Quantum Technology. (a) The APST and the APNSA, in consultation with the Co-Chairs of the ESIX Subcommittee, shall coordinate with the relevant agencies to ensure that QIST activities and policies maintain robust and balanced security controls to safeguard critical information and protect national security interests, while not unduly impacting quantum innovation in the United States.

(b) The Director of the Federal Bureau of Investigation, in coordination with the Secretary of State, the Secretary of War, the Secretary of Commerce, the Secretary of Energy, the Secretary of Homeland Security, the DNI, and the Director of the NSA, shall propose to the APST, the APNSA, and the Director of OMB staffing requirements to expand the Quantum Information Science and Technology Counterintelligence Protection Team (QCPT) to improve and coordinate protections against adversarial threats to the QIST ecosystem, including cybersecurity threats, coordinate public messaging and outreach related to those threats, and enhance sharing of threat information with Federal, industry, and academic QIST research and development entities. Relevant agencies shall coordinate and deconflict with the QCPT on all outreach to QIST industry and academia related to quantum-specific security guidance and threat information.

Sec. 8 . Expanding and Retaining the Quantum Workforce. (a) Within 90 days of the date of this order, the Director of the Office of Personnel Management, in consultation with the APST and the Director of OMB and in coordination with the Secretary of War, the Secretary of Commerce, the Secretary of Energy, the DNI, and the Director of NSF, shall develop a Government-wide QIST recruitment and retention strategy, potentially including special pay rates and increased limits for recruitment and retention incentives. This strategy should complement existing efforts to build a strong national security quantum-workforce.

(b) Within 120 days of the date of this order:

(i) the Secretary of Labor shall ensure that QIST-relevant industry needs are prioritized in workforce training efforts related to Executive Order 14278 of April 23, 2025 (Preparing Americans for High-Paying Skilled Trade Jobs of the Future), and the implementation of America's Talent Strategy where possible, including related to the expansion of registered apprenticeships for relevant occupations; and

(ii) the Secretary of Labor and the Director of NSF, in coordination with the Co-Chairs of the SCQIS Subcommittee, shall develop an approach to tracking labor statistics for assessing the needs of the United States quantum ecosystem, including developing a definition for “QIST-relevant occupations”, and associated skills and credentials.

(c) Within 180 days of the date of this order:

(i) the APST shall engage with United States industry and academic institutions to promote the expansion of post-secondary training opportunities for supporting skillsets that will lead Americans into rewarding QIST industry jobs, such as by prioritizing hands-on training with QIST systems or concepts; and

(ii) the Director of NSF shall take steps to initiate a network of National QIST Workforce Development Institutes to enhance QIST training opportunities and coordinate training efforts across Federal, State, and local agencies.

Sec. 9 . Engaging with International Partners. (a) The Secretary of State and the Secretary of Commerce, in coordination with other relevant agencies as appropriate, shall align their respective international engagements in ways designed to:

(i) ensure that United States quantum and quantum-enabling technology companies have access to strategic markets and capital from like-minded countries;

(ii) maintain an international ecosystem of quantum-enabling technology companies with access to trusted supply chains, through, for example, harmonizing investment restrictions with international allies and partners;

(iii) prevent countries of concern from acquiring critical quantum-enabling technologies, through, for example, harmonizing research security and export control policies with international allies and partners;

(iv) promote and enhance research and development collaboration and the flow of people and ideas across like-minded countries in support of the interests of the United States quantum industry; and

(v) develop, promote, and coordinate effective quantum research and technology protection efforts with like-minded countries.

(b) The Secretary of Commerce, in coordination with the United States Trade Representative, shall identify and provide recommendations to the President, through the APST, to address foreign trade barriers, discriminatory treatment, and other policies that limit the competitiveness of American QIST companies.

(c) Within 120 days of the date of this order, the Secretary of State shall provide recommendations to the APNSA and the APST on how to align existing bilateral and multilateral international engagements, including Pax Silica, to advance the priorities of this order.

Sec. 10 . Reports. (a) Reports shall be submitted to the President, through the APST and the Director of OMB, regarding the actions directed in:

(i) section 6(a) of this order within 90 days of the date of this order; and

(ii) section 5(b) of this order within 120 days of the date of this order.

(b) Reports shall be submitted to the President, through the APST and the APNSA, regarding the actions directed in:

(i) section 7(b) of this order within 60 days of the date of this order; and

(ii) section 9(a) of this order within 180 days of the date of this order.

(c) Reports shall be submitted to the President, through the APST, the APNSA, and the National Cyber Director, regarding the actions directed in section 4(f) of this order within 1 year of the date of this order, and annually thereafter.

Sec. 11 . General Provisions. (a) Nothing in this order shall be construed to impair or otherwise affect:

(i) the authority granted by law to an executive department or agency, or the head thereof; or

(ii) the functions of the Director of the Office of Management and Budget relating to budgetary, administrative, or legislative proposals.

(b) This order shall be implemented consistent with applicable law and subject to the availability of appropriations.

(c) This order is not intended to, and does not, create any right or benefit, substantive or procedural, enforceable at law or in equity by any party against the United States, its departments, agencies, or entities, its officers, employees, or agents, or any other person.

(d) The costs for publication of this order shall be borne by the Department of Energy.

Trump.EPS