OMB Orders Federal Agencies to Submit Quantum-Resistant Encryption Migration Plans
This is a forcing function for defense contractors who supply cryptographic libraries to federal systems. Raytheon, Northrop Grumman, and smaller crypto vendors now have a guaranteed customer base for post-quantum cryptography implementations. The constraint is not demand — it's supply-side: NIST hasn't finalized post-quantum standards, and production-grade implementations don't exist at scale yet.
If OMB enforces the timeline, vendors face a 24-36 month window to move from lab to fielded systems across hundreds of agencies. This creates either a bottleneck or a windfall depending on how fast the supply chain can move.
Every federal agency with classified networks or sensitive data systems now faces a hard deadline to inventory legacy cryptography and commit to replacement timelines.
This forces specific decisions at NSA, CISA, DoD, and intelligence agencies: which systems migrate first, who funds the transition, and what happens to air-gapped legacy systems that can't be patched. The mechanism is straightforward — OMB controls budget authority and can withhold appropriations for non-compliant agencies.
Watch for the first agency plan submissions to reveal which departments are ahead (likely NSA and DoD) and which are scrambling (civilian agencies with aging IT stacks).
What is the actual deadline for plan submission, and does OMB have enforcement teeth — can they actually freeze funding for non-compliance, or is this advisory?
Fault Lines
Strategic intelligence, synthesized daily — with a public track record. Every call graded against what actually happened.