IC Technology & Cyber — 2026-10-04

NSA Announces Post-Quantum Cryptography Safeguards With 2027 Deadline for New Systems and 2030 Phase-Out of Legacy Crypto

BLUFNSA's binding 2027 deadline for quantum-resistant National Security Systems creates a procurement mandate the agency has yet to back with the transition guidance vendors need to meet it.

The National Security Agency announced new initiatives on October 1 to protect National Security Systems from quantum computing threats, citing Executive Order 14412 and the Department of War and Defense Industrial Base as the stakeholders it is working to secure 12. NSA's release states that Committee on National Security Systems Policy 15 requires all new commercial National Security Systems, starting in 2027, to support quantum-resistant algorithms, and that legacy systems unable to do so are to be phased out by 2030 12. Morgan Stern, NSA's effort lead for quantum resistance, said the agency is working with academia and industry on standards, guidelines, and stakeholder education, and that adversaries already use "harvest now, decrypt later" strategies 1. NSA said it is still developing transition resources, and the release lists only existing Cybersecurity Collaboration Center DIB services and Zero Trust Implementation Guidelines, with no new post-quantum guidance published 1. Intelligence Community News reproduced the NSA text on October 2 2.

Analysis
NSA has turned the quantum transition from guidance into a dated procurement obligation, but it has published no new post-quantum technical resources to meet it. Vendors and system owners have about 15 months to field quantum-resistant products for new commercial National Security Systems, with only existing Cybersecurity Collaboration Center and Zero Trust offerings to lean on and no date for new materials. Stern's point that adversaries already harvest encrypted traffic makes the deadlines damage limitation for data already collected. All reporting traces to one NSA release, so nothing is independently corroborated. The announcement may instead mainly restate existing Policy 15 timelines to show compliance with Executive Order 14412, not signal new capability.

3 sources

NSA Announces Post-Quantum Cryptography Measures to Safeguard National Security Systems Against Quantum Computing Threats - National Security Agency/Central Security Service
NSA announces PQC safeguards - Intelligence Community News
NSA to Develop Post-Quantum Cryptography Resources for National Security Systems - ExecutiveGov