Post Quantum Encryption

Overview

As quantum computing continues to evolve, the security of existing cryptographic systems faces an unprecedented threat. Post-quantum encryption (PQE) is no longer a distant goal; it is a critical, urgent priority. Marion Square has been actively tracking the federal government’s transition to PQE, working closely with both technology companies and government agencies to ensure a smooth and secure transition.

Key Facts

Federal mandates such as NSM-10 and OMB 23-02 have set the course for agencies to begin their PQE journeys. The stakes are high, and failure to meet these mandates could expose critical systems to quantum-enabled adversaries. According to the recent OMB report to Congress, the government is expected to spend approximately $1 billion annually over the next decade on this transition, though many experts predict the true cost could be much higher.

The Importance of NSM-10, OMB 23-02, and the OMB Report

Federal agencies are under strict orders to secure their cryptographic systems against quantum threats, with NSM-10 and OMB 23-02 providing clear directives. These mandates require agencies to initiate the transition to quantum-resistant encryption, with specific deadlines and deliverables.

• NSM-10 mandates the identification and protection of national security systems.

• OMB 23-02 outlines the timeline for upgrading cryptographic mechanisms in civilian systems, including reporting requirements to ensure transparency and accountability.

The Role of Technology Companies in Supporting Federal Agencies

The transition to post-quantum encryption will require strong collaboration between federal agencies and technology providers. Companies offering PQE solutions will be key partners in providing the tools, expertise, and automation required for a successful transition.

From automating the discovery and inventory process to providing advanced cryptographic tools, technology providers will play a crucial role in:

• Automating Cryptographic Inventories: Deploying tools that help agencies automatically detect and document cryptographic mechanisms, reducing the burden on manual processes.

• Quantum-Safe Encryption Solutions: Offering scalable, future-proof cryptographic systems to replace vulnerable algorithms.

• Ongoing Risk Assessment: Supporting agencies with continual risk evaluations and updates as quantum technologies and cryptographic standards evolve.

This partnership ensures that agencies can meet their compliance requirements while staying ahead of quantum-enabled threats.