U.S. Moves to Build Quantum Computers While Shielding Data from Them

The White House has issued two executive orders that set the U.S. on a dual path: accelerating the development of large-scale quantum computers while also preparing federal systems for the day those machines could render current encryption obsolete. One order directs resources toward building advanced quantum systems, including a flagship machine hosted by the Department of Energy, while the second mandates a government-wide transition to post-quantum cryptography by 2030. This coordinated strategy reflects a recognition that quantum computing is not a distant theoretical risk but an emerging capability that could reshape national security, critical infrastructure, and digital trust within the next decade.

The first order focuses on capability building. It tasks the Department of Energy with hosting at least one advanced quantum computer, positioning the agency as a central node in a national quantum infrastructure. The Pentagon is also directed to prioritize and field next-generation quantum sensors by 2028, signaling a broader push into quantum technologies beyond computing. These steps aim to ensure the U.S. remains at the forefront of quantum research and deployment, leveraging federal investment to catalyze private sector and academic collaboration. The second order addresses defense. It requires all federal agencies to migrate to post-quantum cryptography for key establishment by 2030, effectively setting a deadline for replacing algorithms vulnerable to quantum attacks. This includes systems handling classified data, financial transactions, and citizen services, all of which rely on encryption that could be broken by sufficiently powerful quantum computers.

Together, these orders represent a strategic pivot: the government is simultaneously building the very machines that could break today’s encryption and preparing to defend against them. This dual approach underscores the urgency of the quantum transition and the need to avoid a scenario where adversaries gain quantum supremacy before defenses are in place. The timeline is aggressive, with federal systems expected to be quantum-resistant within six years. For organizations outside government, this shift signals a coming wave of change in how data is secured, stored, and transmitted.

Why the U.S. is racing to build quantum computers

The push to develop large-scale quantum computers is driven by their potential to revolutionize fields such as drug discovery, materials science, and artificial intelligence. Quantum computers leverage quantum bits, or qubits, which can exist in multiple states simultaneously, enabling them to perform certain calculations exponentially faster than classical computers. A sufficiently powerful quantum computer could, for example, simulate molecular interactions with precision unattainable today, accelerating the development of new medicines or more efficient solar cells. The Department of Energy’s role in hosting a flagship quantum computer reflects a strategic bet on energy-related applications, such as optimizing power grids or modeling fusion reactions.

Beyond scientific research, quantum computing is seen as a strategic asset in national security. Nations that achieve quantum advantage could gain decisive advantages in codebreaking, secure communications, and strategic simulation. By directing the Department of Energy to host a quantum computer, the U.S. is centralizing a key resource while fostering collaboration across national laboratories, universities, and private companies. The inclusion of quantum sensors in the Pentagon’s priorities further highlights the breadth of quantum technologies under development, extending beyond computing into sensing, navigation, and surveillance. These sensors could enhance situational awareness, detect stealth aircraft, or improve the accuracy of GPS systems in contested environments.

The timeline set for fielding next-generation quantum sensors by 2028 suggests a phased deployment strategy. Early quantum sensors are already being tested in defense and scientific applications, but scaling them to operational readiness within a few years will require sustained investment and technical breakthroughs. The dual focus on computing and sensing indicates that quantum technology is being treated not as a single breakthrough but as a cluster of transformative capabilities with broad implications for national power.

The encryption dilemma: preparing for quantum decryption

The second executive order addresses a looming threat: the potential for quantum computers to break widely used encryption algorithms such as RSA and ECC, which underpin secure communications, digital signatures, and cryptocurrencies. While large-scale, fault-tolerant quantum computers capable of such feats do not yet exist, experts warn that the time to prepare is now. Harvest-now-decrypt-later attacks—where adversaries collect encrypted data today in anticipation of decrypting it with future quantum computers—are a growing concern. Sensitive data, once collected, could remain valuable for decades, making early migration to quantum-resistant encryption a prudent strategy.

Federal agencies are now required to secure key establishment using post-quantum cryptography by 2030. This means replacing or upgrading systems that rely on public-key cryptography with algorithms designed to resist attacks from both classical and quantum computers. The National Institute of Standards and Technology (NIST) has been leading the standardization of post-quantum cryptographic algorithms, and several candidates are already in advanced stages of evaluation. Agencies will need to inventory their cryptographic systems, assess vulnerabilities, and implement migration plans over the next six years. The deadline is not arbitrary; it reflects the typical lifecycle of federal IT systems and the need to avoid last-minute scrambles as quantum threats become more realistic.

For organizations outside government, this transition is a bellwether. Financial institutions, healthcare providers, and technology companies that rely on encryption should begin auditing their cryptographic posture now. The shift to post-quantum cryptography will require software updates, hardware replacements, and potentially architectural changes to systems that have operated securely for decades. Early adopters will gain a competitive advantage by avoiding rushed migrations and ensuring continuity of service during the transition.

What post-quantum cryptography means for businesses and users

Post-quantum cryptography refers to a new class of encryption algorithms designed to withstand attacks from both classical and quantum computers. Unlike traditional public-key cryptography, which relies on the computational difficulty of factoring large numbers or solving discrete logarithms, post-quantum algorithms are based on problems believed to be hard even for quantum machines. Examples include lattice-based cryptography, hash-based signatures, code-based encryption, multivariate cryptography, and isogeny-based schemes. Each approach offers different trade-offs in terms of performance, key size, and computational overhead.

For businesses, the transition will involve updating servers, APIs, client applications, and embedded systems to support new cryptographic standards. Cloud providers and software vendors will need to integrate post-quantum algorithms into their offerings, and enterprises will have to test and deploy these updates without disrupting operations. The process is likely to be gradual, with hybrid systems that combine classical and post-quantum algorithms during the transition period. Users may not notice immediate changes, but behind the scenes, data will be protected by stronger, future-proof encryption. For sectors handling highly sensitive data—such as defense contractors, financial institutions, and healthcare providers—the urgency is higher, as these are likely early targets for quantum-enabled attacks.

Individual users will also be affected indirectly. Services they rely on, such as email, messaging, and online banking, will need to upgrade their security protocols. Developers building new applications should design with post-quantum cryptography in mind from the outset, avoiding the technical debt that comes with retrofitting security later. Open-source libraries and frameworks are already beginning to include post-quantum cryptographic options, and developers should monitor these updates closely. While the full impact will unfold over years, proactive planning can help avoid disruptions and ensure seamless transitions.

National security and the quantum timeline

The U.S. government’s timeline reflects a calculated assessment of the quantum threat. By mandating post-quantum cryptography for key establishment by 2030, officials are acknowledging that the window to prevent a decryption crisis is closing. The order does not cover all encryption use cases immediately, but key establishment—the foundation of secure communication and authentication—is a critical starting point. This phased approach allows agencies to prioritize the most vulnerable systems while buying time to address broader encryption needs.

From a national security perspective, the risk is twofold: adversaries could either develop quantum computers first and decrypt sensitive data, or they could exploit vulnerabilities in current systems before defenses are upgraded. The executive orders aim to mitigate both risks by accelerating U.S. quantum capabilities and hardening defenses simultaneously. The emphasis on key establishment suggests a focus on protecting communications and authentication systems, which are foundational to both military and civilian operations. Over time, the scope of post-quantum migration is likely to expand to include bulk encryption and data-at-rest protections.

The Pentagon’s push for quantum sensors adds another layer to the national security strategy. Quantum sensors, which exploit quantum properties like entanglement and superposition, can detect minute changes in magnetic fields, gravity, or electromagnetic signals. These capabilities could be used to improve the detection of submarines, locate underground facilities, or enhance the precision of navigation systems in GPS-denied environments. By prioritizing deployment by 2028, the U.S. is signaling its intent to operationalize quantum sensing within a relatively short timeframe, integrating it into broader defense systems.

What businesses should do now

For companies outside government, the executive orders are a clear signal to begin preparing for the quantum transition. The first step is conducting a cryptographic inventory: identify all systems, applications, and data flows that rely on public-key cryptography. This includes SSL/TLS certificates, VPNs, digital signatures, and any custom encryption implementations. Once the landscape is mapped, assess which systems are most vulnerable and prioritize them for migration. Given the 2030 deadline, early planning can prevent rushed implementations and ensure compatibility with future standards.

Next, monitor the development of post-quantum cryptographic standards. NIST’s ongoing standardization process is the primary guide for which algorithms will be adopted, and updates to libraries such as Open Quantum Safe or Microsoft’s PQCrypto are likely to appear in mainstream development tools. Engage with cloud providers and software vendors to understand their post-quantum roadmaps, as many will offer managed services or updated SDKs. Testing hybrid systems—combining classical and post-quantum algorithms—can help identify performance bottlenecks or compatibility issues before full migration.

Finally, consider the broader implications of quantum computing beyond cryptography. While the immediate focus is on encryption, quantum computers could disrupt industries by enabling new simulations, optimizations, and AI workloads. Businesses in pharmaceuticals, logistics, finance, and materials science should explore how quantum computing might create opportunities or competitive advantages. Early experimentation with quantum algorithms or cloud-based quantum simulators can provide insights into future capabilities without requiring large upfront investments.

The global context: competition and collaboration

The U.S. is not alone in pursuing quantum computing. China, the European Union, and other nations have launched ambitious quantum initiatives, each aiming to secure leadership in this transformative field. China has invested heavily in quantum communication networks and reportedly achieved quantum supremacy in specific tasks, while the EU’s Quantum Flagship program coordinates research across member states. The U.S. orders signal an intensification of competition, with a focus on both capability building and defensive readiness.

International collaboration remains possible, particularly in areas like standardization and threat assessment. Post-quantum cryptography is one such domain, where global coordination can prevent fragmentation and ensure interoperability. However, technology leadership is also a strategic concern, and the U.S. orders reflect a desire to maintain an edge in quantum computing while protecting critical infrastructure. For multinational companies, this geopolitical context adds complexity: decisions about where to deploy quantum resources or which cryptographic standards to adopt may be influenced by regional policies and export controls.

The dual focus on building quantum computers and defending against them also highlights a broader trend in technology policy: the need to balance innovation with resilience. Governments are increasingly recognizing that technological leadership must be paired with protective measures to prevent misuse or unintended consequences. This approach is evident in other domains, such as AI safety and semiconductor export controls, where the goal is to foster progress while mitigating risks.

Practical steps for individuals and developers

Individual users can take steps to prepare for the post-quantum transition, even if the changes will largely be invisible at the user level. First, ensure that devices and software are kept up to date, as many updates will include cryptographic improvements. Second, be cautious about storing highly sensitive data in unencrypted formats or using outdated encryption protocols. While the risk of quantum decryption is still years away, practicing good data hygiene now reduces exposure to future threats.

Developers should familiarize themselves with post-quantum cryptographic libraries and tools. Projects like Open Quantum Safe provide reference implementations of post-quantum algorithms, and frameworks such as OpenSSL are beginning to integrate these options. Experimenting with hybrid encryption—combining classical and post-quantum algorithms—can help identify potential issues early. Developers building new applications should also consider the long-term cryptographic requirements of their systems, avoiding dependencies on algorithms that may become obsolete.

For IT administrators, the transition will require careful planning to avoid service disruptions. Cryptographic agility—the ability to swap algorithms without major architectural changes—will be a key capability. Testing migration paths in staging environments and rolling out updates incrementally can minimize risk. Additionally, monitoring for new vulnerabilities in post-quantum algorithms will be important, as the field is still evolving and some approaches may be found to have weaknesses.

Looking ahead: a quantum-ready future

The next five years will be critical in shaping the quantum landscape. By 2030, federal systems are expected to be protected by post-quantum cryptography, and quantum sensors are likely to see broader deployment in defense and scientific applications. The flagship quantum computer hosted by the Department of Energy will serve as a hub for research and collaboration, potentially accelerating breakthroughs in energy, materials, and AI. For the private sector, the transition to post-quantum cryptography will be a major undertaking, but one that offers long-term security benefits.

The dual strategy of building quantum capabilities while defending against them reflects a mature understanding of technological risk. It acknowledges that quantum computing is not a distant threat but an emerging reality that demands proactive measures. Organizations that start preparing now will be better positioned to navigate the transition, whether by upgrading cryptographic systems, exploring quantum computing opportunities, or both. The message from the White House is clear: the quantum era is coming, and the time to prepare is now.