US Quantum Threat Readiness Needed Now

The quantum computing revolution is no longer a distant future; it is rapidly approaching, bringing profound implications for national security, cybersecurity, and the resilience of our digital infrastructure. The urgency for US quantum threat readiness cannot be overstated. As adversaries advance quantum technologies, the cryptographic systems protecting classified intelligence, critical infrastructure, and financial transactions are on the brink of obsolescence. The time for decisive action is now.

The Challenge of US Quantum Threat Readiness

Current encryption methods, such as RSA and ECC, depend on the computational limits of classical computers to ensure security. However, quantum computers have the potential to break these systems, exposing sensitive information to malicious actors. Transitioning to post-quantum cryptography (PQC) is not a mere technological upgrade; it is a national security imperative.

The costs of failing to achieve US quantum threat readiness are staggering. A compromised encryption framework could lead to catastrophic breaches—threatening military communications, government secrets, critical infrastructure, and the personal data of millions of citizens. These risks are not hypothetical but imminent, as quantum advancements accelerate. Addressing them requires a concerted effort, substantial investment, and urgency commensurate with the stakes.

What’s at Risk?

The scale and complexity of transitioning to PQC extend beyond procuring new technologies. For government agencies and military infrastructure, the investment required for quantum-safe systems is significant. This includes:

• Specialized Technologies: Developing and implementing quantum-resistant cryptographic algorithms.
• Workforce Upskilling: Training personnel to design, deploy, and manage quantum-safe systems.
• System Overhaul: Retrofitting or replacing legacy infrastructure to accommodate new encryption standards.

The cost of transitioning to post-quantum cryptography is significant, reflecting the complexity of the undertaking and the stakes involved. However, these investments are dwarfed by the potential costs of failing to act. The urgency on post-quantum cryptography arises from the imminent risk of catastrophic breaches.

A single major breach—such as the compromise of military communications or financial systems—could result in economic damage far exceeding these projections. Moreover, the threat of retroactively decrypting vast amounts of stored data—a phenomenon known as ‘harvest now, decrypt later’—further underscores the urgency of immediate action.

Estimated Total Cost

The transition to post-quantum cryptography is a monumental undertaking. Initial estimates suggest that securing U.S. government infrastructure—spanning civilian, military, and intelligence agencies—could cost between $21.5 billion and $32 billion over the next decade.

This investment will fund:

• Quantum-safe hardware and algorithm procurement
• Software upgrades across critical systems
• Expert consulting to guide implementation and strategy
• Comprehensive testing and validation procedures

The scale of this effort is staggering. Agencies as diverse as the Department of Defense, civilian data centers, and state-level institutions must overhaul their systems to withstand the quantum threat. This cost reflects not only the complexity of transitioning but also the imperative to ensure long-term resilience against quantum-enabled attacks.

Strategic Actions for US Quantum Threat Readiness

Securing our digital infrastructure against quantum threats requires a multifaceted approach. Governments must address the urgency on post-quantum cryptography by adopting policies, fostering collaboration, and investing in workforce development to ensure national resilience. Below are five strategic actions governments, in collaboration with industry leaders, must prioritize:

Policy Action

Federal and state lawmakers must take immediate steps to fund and legislate the advancement of PQC research and implementation. A cohesive national strategy should:

• Allocate resources for technology procurement and workforce training.
• Establish cybersecurity standards incorporating quantum-safe encryption.
• Provide incentives for private-sector adoption of PQC technologies.

The recently announced National Institute of Standards and Technology (NIST) PQC algorithms offer a foundational starting point, but further government support is critical to ensure widespread adoption. A clear roadmap, backed by legislation, will provide the necessary direction and momentum.

Public-Private Partnerships

Collaboration between government agencies and private industry is essential to accelerate PQC readiness. Partnerships with quantum startups and established consulting firms will accelerate innovation and ensure readiness across industries. The following two examples illustrate the critical role these organizations play in addressing quantum security challenges

• SandboxAQ: As a leader in quantum cryptography, SandboxAQ demonstrates the transformative potential of quantum startups. Their 2022 contract with the U.S. Air Force through the SBIR program highlights their capability to deliver crypto-agile solutions to safeguard data against quantum threats. With a $5.6 billion valuation and proven success across industries such as healthcare and financial services, SandboxAQ is uniquely positioned to address both public and private sector challenges.
• EY: Consulting firms like EY bring strategic expertise to quantum risk management. EY’s partnerships with quantum technology providers, including SandboxAQ, underscore their ability to integrate cutting-edge solutions into customized risk frameworks. By offering readiness assessments, tailored strategies, and cross-sector support, EY ensures organizations are prepared for the operational and security challenges of the quantum era.

Harnessing the combined resources and insights of public institutions and private-sector innovators will expedite the development and deployment of quantum-safe systems.

Workforce Development

As the transition to PQC accelerates, the demand for skilled professionals in quantum computing and cryptography will surge. Governments and private-sector leaders must:

• Invest in specialized training programs for IT and cybersecurity personnel.
• Collaborate with academic institutions to develop curricula focused on quantum-safe cryptography.
• Provide incentives for individuals to pursue careers in quantum technologies.

Building a robust pipeline of quantum-savvy professionals is essential to sustain the momentum needed to secure digital infrastructure.

Engage Citizens

The quantum era will impact not only governments and businesses but also everyday citizens. Public education campaigns should:

• Raise awareness of quantum computing’s potential risks and benefits.
• Provide actionable steps for individuals to secure personal data, such as adopting multi-factor authentication and regularly updating passwords.
• Promote trust in new quantum-safe technologies by communicating their importance clearly and transparently.

Empowering citizens with knowledge and tools will reduce vulnerabilities across the broader digital landscape.

Global Collaboration

 Achieving US quantum threat readiness will require leveraging global partnerships to create universal standards for quantum-safe technologies. The United States must work collaboratively with allies to ensure interoperability, intelligence-sharing, and a united front against quantum-enabled cyber threats.

Quantum threats transcend national borders, necessitating international cooperation. Governments must work together to:

• Establish global standards for PQC to ensure interoperability and consistency.
• Share intelligence on emerging quantum threats and solutions.
• Promote the development of international treaties addressing quantum-enabled cyberattacks.

By fostering global collaboration, nations can collectively mitigate the risks posed by quantum computing while unlocking its potential for shared progress.

The Clock Is Ticking

The quantum computing revolution is not a matter of “if” but “when.” While timelines for quantum supremacy vary, the consensus among experts is clear: preparation must begin now. The longer we wait, the narrower the window of opportunity to safeguard our digital infrastructure.

Governments must adopt a proactive approach, treating PQC not as a distant priority but as an immediate necessity. By leveraging the expertise of industry leaders like SandboxAQ and EY, investing in workforce development, and fostering public-private partnerships, we can build a quantum-safe future.

The stakes couldn’t be higher. The decisions we make today will determine our ability to navigate the quantum era securely and effectively. Let us act with urgency to ensure that our nation’s digital infrastructure remains resilient in the face of this transformative challenge.

To read the full 15-page white paper that discusses this critical threat in depth, click here.