Project 2025 Tracker / What’s done, what’s next

7. Intelligence Community · Notable

Revise the National Security Memorandum's 2035 quantum risk goal

Partially done

Printed page 228 7. Intelligence Community

“The President’s National Security Memorandum specifying “the goal of mitigating as much of the quantum risk as is feasible by 2035” needs to be revised in light of the magnitude of the threat.”

What has happened

  1. Partially done

    Executive Order 14412 sets a materially earlier government-wide timetable than NSM-10's 2035 goal: post-quantum cryptography for key establishment on all high value assets and high impact systems by 2030-12-31, for digital signatures by 2031-12-31, a NIST migration pilot to be completed by 2027-12-31, and a proposed FAR rule requiring covered contractors to comply with the PQC FIPS by 2030-12-31. That is the acceleration the Quote asks for, delivered by executive order. `partial` and not `done` because National Security Memorandum 10 itself was neither amended nor revoked — the order does not mention it or the 2035 goal — and its National Security Systems track is left to the NSA reporting line rather than given a new date.

  2. Attempted

    Executive Order 14306 is the first instrument to touch the post-quantum timetable. It struck subsections 4(b)(iv) and 4(d)(ii)-(iii) of Executive Order 14144 and replaced subsection 4(f) with text that recites National Security Memorandum 10 of 2022 and sets a single new deadline, TLS 1.3 support by 2030-01-02. NSM-10's "as much of the quantum risk as is feasible by 2035" goal is recited, not revised; on the Quote's own terms the order moved the other way on some requirements by removing them.

Research log

What was searched, and what didn’t count as evidence

Research notes

  • A Federal Register full-text search for “National Security Memorandum 10” since 2025-01-20 returns exactly one document, Executive Order 14306; “post-quantum” returns five, of which the two presidential documents are Executive Orders 14412 and 14413 of 2026-06-22.
  • Boundary call: setting earlier deadlines in a new order without touching the memorandum is either a revision in substance (partial, as recorded) or no revision at all (not started).
Action
issue
Object
National Security Memorandum on quantum computing risk mitigation
ID
607