[{"data":1,"prerenderedAt":136},["ShallowReactive",2],{"news-\u002Fnews\u002Fdefense-industrial-base-pentagon-2030-deadline":3},{"id":4,"title":5,"author":6,"authorTitle":7,"authorUrl":8,"body":9,"canonical":8,"category":91,"date":92,"description":93,"draft":94,"extension":95,"faqs":8,"findingsSource":8,"geo":96,"image":8,"industries":98,"keyFindings":8,"meta":101,"modified":92,"navigation":102,"path":103,"pullquote":8,"recommendations":8,"references":104,"related":117,"seo":124,"seoTitle":125,"signposts":8,"slug":126,"stats":8,"stem":127,"tags":128,"tldr":134,"__hash__":135},"news\u002Fnews\u002Fdefense-industrial-base-pentagon-2030-deadline.md","The Pentagon's 2030 Deadline Pushes Defense Suppliers to Inventory Cryptography Now","ArcQubit Team","",null,{"type":10,"value":11,"toc":82},"minimark",[12,17,30,34,40,44,53,57,68,72,75,79],[13,14,16],"h2",{"id":15},"the-answer-up-front","The answer, up front",[18,19,20,21,25,26,29],"p",{},"Defense suppliers have a hard date to plan around. The US Department of War published a post-quantum strategy in June 2026 that requires all systems to support the new cryptography by December 31, 2030, with full implementation by December 31, 2031 ",[22,23,24],"span",{},"1",". The requirements are expected to reach contractors through the Cybersecurity Maturity Model Certification (CMMC), and reporting says they may flow down before rulemaking finishes ",[22,27,28],{},"2",". The defense industrial base is private-sector by definition, so this is a direct, dated obligation for contractors and their suppliers.",[13,31,33],{"id":32},"the-department-of-war-strategy","The Department of War strategy",[18,35,36,37,39],{},"The strategy sets five lines of effort: governance, cryptographic inventory, technology development, commercial integration and large-scale deployment, and it rules out quantum key distribution and simply lengthening keys in vulnerable algorithms ",[22,38,24],{},". In plain terms, the Department wants an inventory first and a migration that uses the standardized post-quantum algorithms, not stopgaps.",[13,41,43],{"id":42},"the-contractor-flow-down","The contractor flow-down",[18,45,46,47,49,50,52],{},"DefenseScoop reported in July 2026 that the Department plans to bring post-quantum requirements into CMMC, though details remain unclear ",[22,48,28],{},". Experts quoted there say most of the defense industrial base is not ready and that contractors should expect requirements to flow down before rulemaking finishes ",[22,51,28],{},". For a supplier, the lesson is to start the inventory now rather than wait for a final rule, because the compliance expectation is arriving through the contract chain.",[13,54,56],{"id":55},"australia-and-nato","Australia and NATO",[18,58,59,60,63,64,67],{},"Australia is moving on a similar clock. Defence Connect reported in September 2026 that Australian organizations should produce a transition plan within about four months, start migrating critical systems by 2028, and retire traditional public-key cryptography by 2030, and it argues for sovereign control of keys and maintenance capacity ",[22,61,62],{},"3",". That piece cites survey figures the reporting could not verify and does not state the author's affiliation, so weigh its numbers accordingly. NATO, by contrast, has no matching public deadline: an analyst's reading of the alliance's first Quantum Technology Roadmap, approved July 30, 2026, finds it runs to the third quarter of 2029 without an alliance-wide migration date, with a Brussels-Mons pilot aiming to demonstrate post-quantum cryptography in operational networks by the fourth quarter of 2027 ",[22,65,66],{},"4",". That source is analysis, not the roadmap text.",[13,69,71],{"id":70},"what-this-means-for-suppliers","What this means for suppliers",[18,73,74],{},"The 2030 date is close enough that inventory work should start now. Suppliers should map where vulnerable cryptography lives in their products and networks, document crypto agility and which post-quantum profiles they support, and expect customers to ask for both through CMMC and contract terms.",[13,76,78],{"id":77},"how-arcqubit-approaches-it","How ArcQubit approaches it",[18,80,81],{},"ArcQubit treats the cryptographic inventory as the first deliverable the Department of War strategy itself calls for. QuCode builds that inventory across a contractor's systems and products, and QuTrust holds the migration plan so the supplier can show a current, defensible posture as CMMC and flow-down requirements arrive.",{"title":7,"searchDepth":83,"depth":83,"links":84},2,[85,86,87,88,89,90],{"id":15,"depth":83,"text":16},{"id":32,"depth":83,"text":33},{"id":42,"depth":83,"text":43},{"id":55,"depth":83,"text":56},{"id":70,"depth":83,"text":71},{"id":77,"depth":83,"text":78},"Policy","2026-10-06","The US Department of War requires post-quantum support by end 2030, and reporting says the rules will flow to contractors via CMMC before rulemaking finishes.",false,"md",[97],"arlington",[99,100],"Cross-Sector","Defense Industrial Base",{},true,"\u002Fnews\u002Fdefense-industrial-base-pentagon-2030-deadline",[105,108,111,114],{"label":106,"url":107},"A. Ribeiro, \"DoW launches PQC strategy for cryptographic inventory and migration planning for quantum era, sets 2030 migration deadline,\" Industrial Cyber, Jun. 25, 2026.","https:\u002F\u002Findustrialcyber.co\u002Frisk-management\u002Fdow-launches-pqc-strategy-for-cryptographic-inventory-and-migration-planning-for-quantum-era-sets-2030-migration-deadline\u002F",{"label":109,"url":110},"M. Easley, \"What the Pentagon's new post-quantum cryptography directive means for defense contractors,\" DefenseScoop, Jul. 10, 2026.","https:\u002F\u002Fdefensescoop.com\u002F2026\u002F07\u002F10\u002Fcmmc-pqc-requirements-defense-contractors-cybersecurity\u002F",{"label":112,"url":113},"A. Wilson, \"Time waits for no company: sovereign encryption is becoming a front-line defence capability,\" Defence Connect, Sep. 10, 2026.","https:\u002F\u002Fwww.defenceconnect.com.au\u002Findustry\u002F18843-time-waits-for-no-company-sovereign-encryption-is-becoming-a-frontline-defence-capability",{"label":115,"url":116},"M. Ivezic, \"NATO's First Quantum Roadmap: Sea Trials, a PQC Pilot and No Public Date for its Own PQC Migration,\" PostQuantum.com, Oct. 2, 2026.","https:\u002F\u002Fpostquantum.com\u002Fquantum-policy\u002Fnato-quantum-technology-roadmap\u002F",[118,121],{"label":119,"url":120},"PQC Mandates and Deadlines","\u002Fblog\u002Fpqc-mandates-deadlines",{"label":122,"url":123},"What Executive Order 14412 Requires","\u002Fnews\u002Fus-executive-order-14412-post-quantum-deadline",{"title":5,"description":93},"Pentagon 2030 Deadline Hits Suppliers","defense-industrial-base-pentagon-2030-deadline","news\u002Fdefense-industrial-base-pentagon-2030-deadline",[129,130,131,132,133],"defense industrial base","CNSA 2.0","PQC migration","cryptographic discovery","federal compliance","The US Department of War's post-quantum strategy requires all systems to support the new cryptography by the end of 2030, and reporting says those requirements will flow down to defense contractors through CMMC before rulemaking finishes.","KXh8wIPKmpQbZD-KCuYF_zuohvDnLjfwqUvPARquEIg",1792182884842]