The US Department of Defense has released a Post-Quantum Cryptography (PQC) Strategy outlining plans to transition military networks and systems to quantum-resistant encryption.
The strategy calls for deploying PQC protections on high-impact systems by 2030 and across the department by 2031.
Efforts are intended to address future risks posed by quantum computing, which could potentially undermine current cryptographic methods used to protect communications, data, and command-and-control systems.
“This strategy secures our tactical edge and the safety of our satellite communications and command systems,” stated Kirsten Davies, the US Department of Defense Chief Information Officer.
“It builds the interoperability required to rapidly upgrade our cryptography today while ensuring we can adapt at the speed of innovation to counter the threats of tomorrow.”
Strategy Overview
The initiative will include a department-wide inventory of cryptographic technologies currently used across military systems, followed by the development and testing of quantum-resistant algorithms and security solutions.
A key element is the integration of commercially available technologies based on post-quantum standards developed by the National Institute of Standards and Technology and the National Security Agency.
Implementation will be carried out in phases across military networks, communications systems, weapon platforms, and information technology infrastructure.
The department plans to replace vulnerable cryptographic components and deploy quantum-resistant protections while minimizing operational disruption and aligning with emerging federal cybersecurity and cryptographic standards.
Moreover, the roadmap emphasizes coordination with the defense industrial base to prepare contractors for future cryptographic requirements and accelerate the transition to post-quantum security.
While upgrades to cloud-based services are expected to be relatively straightforward, migrating more complex platforms, including weapon systems and interconnected military networks, could take additional time and involve more technical integration.
