2022 national security memorandum set 2035 goal for quantum-resistant cryptography
4 MAY 2022, WASHINGTON
The White House issued National Security Memorandum 10 under the title "Promoting United States Leadership in Quantum Computing While Mitigating Risks to Vulnerable Cryptographic Systems." It has two goals, in the archived White House text: maintain US leadership in quantum information science, and mitigate risks from a cryptanalytically relevant quantum computer, meaning one powerful enough to break current cryptography. It states that such a machine would be capable of breaking much of the public-key cryptography used on digital systems across the United States. The memorandum sets a goal of transitioning vulnerable cryptographic systems to quantum-resistant cryptography by 2035.
It lists taskings. Within 90 days, agencies set up quantum information science liaisons, NIST starts an industry working group on quantum-resistant adoption and establishes a Post-Quantum Cryptography Migration Project. Within 180 days, CISA engages critical infrastructure partners and OMB sets cryptographic inventory requirements. Within a year, federal agencies submit inventories of vulnerable IT systems. By 31 December 2023, Defense assesses quantum risk to the industrial base and the NSA implements symmetric-key protections for national security systems.
The memorandum's own scope reaches federal civilian agencies, national security system operators, critical infrastructure owners and operators, the private sector, academia, and state, local and tribal governments.
OMB turned the inventory tasking into memorandum M-23-02 in November 2022.
Why it matters. This memorandum is the origin of the 2035 target that later federal documents repeat. Its explicit reach to critical infrastructure and the private sector suggests that organizations outside government should treat 2035 as a planning anchor. Its taskings also show the sequence organizations should expect: inventories first, then migration.