Security Cryptography Whatever Trump's Golden Post-Quantum EO(s)
Jul 2, 2026
Rapid US timelines for post-quantum cryptography migration and what that means for federal systems. New hardware and improved ECC attacks that pushed vendors to move faster. Hard choices around FIPS vs CNSA2 parameters and painful certification processes. Real-world impacts on TLS, SSH, PKI, and certificate transparency scalability.
AI Snips
Chapters
Transcript
Episode notes
Public Cloud Interfaces May Become In Scope
- The EO applies to federal systems including High Value Assets and National Security Systems, so public-cloud consoles and SaaS used to manage govt workloads could fall into scope.
- That raises hard questions about which public-facing sites must support CNSA-level parameter sets and heavy PQ cert chains.
Key Agreement Is Low-Hanging Post Quantum Fruit
- Key-establishment migration is materially easier than signatures because it can be handled via TLS library updates and ephemeral agreements.
- Signatures force new long-lived credentials, certificate issuance, rotation, and trust anchors, complicating public PKI deployment.
Include Cryptography In Contractor Vulnerability Programs
- Require contractors to run VDPs that include cryptographic issues and incorporate cryptographic vulnerability reports into acquisition risk assessments.
- Ensure procurement language mandates vendor VDPs and cryptography-focused testing as the EO suggests.