The White House has issued an executive order directing federal agencies to migrate high-value systems to post-quantum cryptography by 2030 and requiring federal contractors to do the same, according to a statement released June 22, 2026, by the R Street Institute's technology and innovation team. The order addresses the growing threat that advanced quantum computers pose to current encryption methods that protect sensitive government data and critical infrastructure. An upcoming R Street study on the topic warns that the window for proactive migration is closing faster than federal planning has acknowledged.
The executive order deploys existing authority through the Office of Management and Budget and the Cybersecurity and Infrastructure Security Agency, creates procurement requirements designed to send market signals, and launches a pilot program at the National Institute of Standards and Technology. The R Street study recommends expanding those pilots to the Department of Energy, the Department of Defense, and the Department of the Treasury to build a feedback loop from pilots into federal guidance and standards from the start.
According to Mark Dalton, policy director of R Street's technology and innovation team, the order "gets the direction right" but represents only the beginning of necessary work. The forthcoming R Street study advances three core findings: post-quantum cryptography migration is a present-day risk management problem rather than a future one, prioritization must be driven by data sensitivity and system criticality, and federal leadership is necessary but not sufficient on its own. Dalton notes that market forces are already moving and that this shift represents "a strategic opportunity that policy should leverage, not ignore."
The urgency stems from the threat timeline quantum computing presents to existing cryptographic systems. Current encryption protects everything from classified military communications to financial transactions, but sufficiently powerful quantum computers could break these protections. The R Street analysis emphasizes that waiting for quantum threats to materialize before acting would leave critical systems vulnerable, since migration requires years of planning, testing, and implementation across complex federal networks. The executive order's procurement requirements aim to accelerate the transition by creating market incentives for contractors to adopt post-quantum standards now rather than later.
The order marks federal commitment to cryptographic security, but Dalton stresses that Congress needs to follow with matching budget authority to turn directives into reality. The 2030 deadline gives agencies less than four years to overhaul encryption across their most sensitive systems—a massive technical undertaking that will require sustained funding and coordination. The real test isn't the order itself but whether implementation can keep pace with the narrowing window before quantum computing makes today's cryptography obsolete.