Federal post-quantum deadlines are set while attack estimates keep falling

The original edition, written in February 2026, argued that the window for migration was closing as new factoring estimates and nation-state data collection raised the urgency. Since then the United States has put dates on it: an executive order signed June 22, 2026 and an OMB memo two days later require federal high-value assets and high-impact systems to use post-quantum key establishment by December 31, 2030 and post-quantum digital signatures by December 31, 2031. Google and Cloudflare both set 2029 targets, and published attack estimates fell again in March 2026.

• NIST's three final standards, FIPS 203 (ML-KEM), FIPS 204 (ML-DSA) and FIPS 205 (SLH-DSA), remain the only final post-quantum FIPS; FIPS 206 (FN-DSA) does not yet appear on NIST's FIPS list.
• OMB M-26-15 gives civilian agencies 120 days from June 24, 2026 to submit migration plans and lays out five phases through 2035; it does not cover national security systems.
• EO 14412 tells the FAR Council to propose a rule within 180 days requiring covered contractors to comply by December 31, 2030 with NIST FIPS, including those that incorporate post-quantum algorithms.
• Hybrid post-quantum key exchange now protects about 70 percent of browser traffic reaching Cloudflare, but post-quantum authentication lags: Cloudflare expects the first ML-DSA certificates in the web PKI in early 2027.
• The Global Risk Institute's March 2026 survey of 26 experts put the odds of a cryptographically relevant quantum computer at 28 to 49 percent within 10 years and 51 to 70 percent within 15.
• The proposed HIPAA Security Rule overhaul, which discusses quantum computing, is now projected for a final rule in July 2027 rather than the May 2026 the original expected.

Any organization whose data must stay confidential for a decade or more, and any organization that sells to or supports federal agencies. Exposure follows how long the data stays valuable and how many vendors sit in the chain.

• Federal agencies and contractors: EO 14412 and M-26-15 set dates, and a FAR rule is due for contractors.
• State, local and education agencies holding long-retention records such as identity, health and student data; no state mandate was confirmed in this review.
• Healthcare organizations: the HIPAA Security Rule proposal discusses quantum computing, with a final rule now projected for July 2027.
• Financial institutions: the G7 Cyber Expert Group roadmap targets critical systems in the 2030 to 2032 window and the rest around 2035.
• Critical infrastructure and operational technology: EO 14412 tells sector risk management agencies to help operators plan, and CISA's product list excludes OT and IoT devices.

In priority order, highest impact first.

1. 01

   Do firstBuild a cryptographic inventory now, using automated discovery for certificates, TLS endpoints, VPNs, code signing and embedded keys.

   OMB's memo calls the inventory the foundation of every migration plan and expects automation and a cryptographic bill of materials.

2. 02

   Prioritize systems by how long their data stays sensitive, starting with identity, health, student and government records, and by exposure to the internet.

   Data captured today can be decrypted later, so long-lived data is the first thing to protect.

3. 03

   Turn on hybrid ML-KEM key exchange wherever your stack already supports it, and move TLS endpoints to TLS 1.3.

   Browsers, Apple platforms and major CDNs already negotiate it, and hybrid key exchange is the standard route to protection against later decryption.

4. 04

   Write post-quantum support and cryptographic agility into every software, network and cloud purchase, using CISA's product categories list as the reference.

   The FAR rule due under EO 14412 will carry federal requirements to contractors and the vendors behind them.

5. 05

   Plan the signature and certificate migration as its own track: PKI, code signing, device identity and ML-DSA readiness.

   Authentication has the longest dependency chain, and Cloudflare expects the first ML-DSA certificates in the web PKI only in early 2027.

6. 06

   Use only NIST-standardized algorithms, and treat quantum key distribution and pre-shared-key products sold as quantum-safe with caution.

   The Defense Department's November 2025 memo bars quantum key distribution for security functions without an exception and sets a 2030 phase-out of pre-shared-key approaches.

7. 07

   Map your regulatory clock: federal contractor requirements, the January 1, 2027 CNSA 2.0 acquisition date for national security systems, HIPAA, and financial sector roadmaps.

   Dates now differ by sector, from 2030 for federal key establishment to 2035 for full migration.

8. 08

   Ask a qualified partner to run a cryptographic discovery and migration roadmap if you lack the staff.

   Z7 Solutions™ offers cryptographic inventory and PQC migration roadmap engagements for federal, SLED, healthcare and financial organizations.