Project 2025 Tracker / What’s done, what’s next

7. Intelligence Community · Minor

Order immediate reviews of post-quantum encryption implementation

Partially done

Printed page 228 7. Intelligence Community

“The President-Elect should require immediate reviews of the progress in implementing post-quantum encryption at a minimum for IC and Defense systems but preferably throughout the government.”

What has happened

  1. Partially done

    Executive Order 14412 puts the reviews the Quote asks for on a standing footing. Section 4(a) makes every agency head name a PQC migration lead within 30 days; section 4(b)(i) makes OMB require every agency to review its inventory of high value assets and high impact systems; and section 5(c) requires the Director of NSA, as National Manager for National Security Systems, to report to the President within 180 days and annually thereafter until migration is complete on the status of PQC migration for agencies owning or operating National Security Systems — that is the IC and Defense half of the ask, government-wide coverage being the other half. Executive Order 14413, signed the same day, adds a tasking to the DNI and the Secretary of War to identify the national security implications of commercial quantum computing, including for the PQC migration. `partial` rather than `done` because the mechanism is in place but the first NSS status report is not due until around 2026-12-19 and no review has yet been delivered.

  2. Attempted

    Executive Order 14306 rewrote the post-quantum section of Executive Order 14144. The new subsection 4(f) recites National Security Memorandum 10 and directs CISA, in consultation with NSA, to publish and maintain a list of product categories in which post-quantum-cryptography products are widely available, and directs the Director of NSA for National Security Systems and the Director of OMB for everything else to issue PQC transition requirements, both by 2025-12-01. A directive on the object without a progress review yet.

Research log

What was searched, and what didn’t count as evidence

Research notes

Action
other
Object
Post-quantum encryption implementation reviews
ID
606