The post-quantum EO is an important milestone. Now it’s time to get to work

Cloudflare's analysis of Executive Order 14409 (June 22, 2026) explains U.S. deadlines requiring federal agencies and contractors to adopt NIST-standardized post-quantum cryptography (PQC): key establishment by Dec 31, 2030 and digital signatures by Dec 31, 2031. The report contrasts the relative maturity of post-quantum encryption (widely deployable today) with the greater challenges of post-quantum authentication, outlines impacts on supply chain and procurement, recommends OMB guidance on definitions, crypto agility and pragmatic inventories (quantum impact inventories vs exhaustive CBOMs), and urges immediate steps—protect internet traffic, update procurement, and plan for authentication—to accelerate migration.