# Federal Agencies Set Post-Quantum Deadlines

Executive Order 14412 sets federal agency deadlines to adopt post-quantum cryptography: December 31, 2030, for key establishment and December 31, 2031, for digital signatures. The order directs the Federal Acquisition Regulatory Council to publish a proposed FAR rule within 180 days, which could extend requirements to suppliers in U.S. government supply chains. The rule is still pending, and the signal identifies no solicitation or contract award.

- Contractors and suppliers should assess where cryptographic systems and dependencies support government work and evaluate migration readiness against the stated deadlines.
- The proposed FAR rule will determine how requirements may apply to suppliers; the signal does not establish that contractors are already subject to a new FAR mandate.
- Securosys SA is promoting PQC-capable hardware security modules and a limited-time sandbox, but this is a commercial offering rather than a government procurement opportunity.

**Jurisdictions:** federal
**Industries:** Information Technology
**Topics:** Cybersecurity, Regulatory Compliance
**Published:** October 16, 2026

### Government Entities
- Federal Acquisition Regulatory Council (FAR Council)
- National Institute of Standards and Technology (NIST)
- U.S. Department of Homeland Security (DHS)
- U.S. Department of State (State Department)

### Vendors
- Securosys SA (Provider promoting PQC-capable hardware security modules)

### Key Quotes
> Any company that supplies technology to the U.S. government, directly or through its supply chain, should take note.
> — Robert Rogenmoser, CEO of Securosys

### Sources
- [The U.S. Just Set an Aggressive Post-Quantum Deadline, and Its Re](https://natlawreview.com/press-releases/us-just-set-aggressive-post-quantum-deadline-and-its-reach-extends-far) - The National Law Review