Post-Quantum Cryptography Joins US Critical Technology List

A shorter list built around quantum risk

The White House has rewritten the federal government's list of critical and emerging technologies for the first time since February 2024. The new list has 14 categories, down from 18. It appears as Appendix A of a 24-page National Security Science & Technology Strategy from the Office of Science and Technology Policy.22 Most early coverage focused on what was cut. Advanced cloud services, high-performance data storage and data centers, batteries, grid integration, gas turbine engines, and augmented and virtual reality are all gone. Post-quantum cryptography, integrated photonics, high-entropy alloys and hardened consumer operating systems were added.21

The quantum entries say the most about where the administration is headed. Post-quantum cryptography now has its own line in the information management and cybersecurity category. It sits next to operational-technology and industrial-control-system security and AI-enabled autonomous cyber capabilities.3021 Quantum information technologies also gets special status. The strategy's alignment matrix gives the "lead in transformative emerging technology" label to only three fields: AI and autonomy, biotechnology and quantum. Semiconductors, which check six of the seven national-security boxes, do not get it.2229 Put plainly, the administration treats quantum as a frontier it wants to lead and treats chips as infrastructure it wants to protect.

What the coverage agrees on, and where it splits

Outlets agree on the basic facts. They report the drop from 18 to 14 categories. They report the swap of clean energy generation and storage for a category limited to nuclear: advanced fission, fusion, space nuclear power and radiation-resistant materials. And they report that the old advanced computing category was renamed future computing technologies.232924 They split on why data centers were dropped and on what the list now does.

The first reports linked the data-center cut to the strategy's funding guidance. That guidance tells agencies to spend where they complement private investment rather than compete with it. The reasoning offered was that hyperscalers are already building the capacity.2125 Other analysts push back. One points out that the document never says data centers were removed because of private spending. In its reading, the funding principle and the deleted terms appear in the same strategy, but that does not prove one caused the other.13 Another notes that data centers are still central to federal policy through a July 2025 executive order on permitting AI data centers. It concludes that being dropped from Appendix A does not mean the government has stopped caring.12

The sharper disagreement is about what the list is for. Some coverage stresses that it is a policy framework. It does not change appropriations, export-control rules or CFIUS authority by itself, and any new restriction would need separate agency action.23 Other analysts argue that the 2026 version matters more than its predecessor. The 2024 list said explicitly that it was not a funding-priority ranking. The new appendix tells agencies to keep dedicated R&D attention on the listed areas and to direct national-security applications toward them.2627

Both readings are partly right, but the second one counts for more. The list creates no new legal powers. It is now, however, written into a strategy that tells agencies how to set priorities. For quantum companies and cryptography vendors, that is an advantage. For battery and AR firms, it is a downgrade they will feel through budgets rather than through any rule change.

Why post-quantum cryptography now has its own line

The new entry mostly confirms decisions made months ago. On June 22, 2026, the President signed an executive order titled "Securing the Nation Against Advanced Cryptographic Attacks." It requires federal agencies to move high-value assets and high-impact systems to post-quantum key establishment by December 31, 2030, and to post-quantum digital signatures by December 31, 2031.41 Reports differ on the order's number. Most identify it as EO 14412.4342 The Cloud Security Alliance's analysis calls it Executive Order 14409.

Two days after the order, OMB issued memorandum M-26-15. It required each agency to name a migration lead by late July and to submit a full migration plan by late October. It also set out a phased schedule that runs to 2035.43 One compliance analysis puts the plan deadline at October 20, 2026, which means agencies are filing their plans right now. The order also directs the FAR Council to propose a rule requiring covered contractors to meet NIST post-quantum standards by the end of 2030. The proposed rule is expected in December 2026. A companion order, "Ushering in the Next Frontier of Quantum Innovation," set up a federal effort to develop and deploy a scientifically useful quantum computer.

Seen in that light, putting post-quantum cryptography on the critical technology list connects research priorities to a migration that is already required. Some coverage of the list makes the same point, noting that the administration had already ordered agencies to plan for quantum-resistant standards.23

The breakthroughs behind the urgency

The timetable got shorter mainly because estimates of the hardware needed to break current encryption fell sharply. In March 2026, Google set 2029 as the deadline to finish its own post-quantum migration. It cited progress in quantum hardware, error correction and factoring resource estimates.31 Cryptography engineers were surprised. One former Microsoft cryptography lead said the target was faster than anything the US government had asked for.32

The research tells the story. Estimates for breaking 2048-bit RSA fell from about a billion physical qubits in 2012 to 20 million by 2019. Google research then put the figure at around one million noisy qubits.32 Papers published at the end of March 2026 cut the numbers further. A Google-led team estimated that the elliptic-curve cryptography used in cryptocurrencies could be broken with about 1,200 logical qubits and fewer than 500,000 physical qubits. A Caltech and Oratomic team described an error-correction method that could make Shor's algorithm practical with as few as 10,000 reconfigurable neutral-atom qubits.36 Cloudflare read Google's decision to prioritize authentication as a sign that Google is worried Q-Day could arrive around 2030.38

Companies are not all moving at the same pace. Cloudflare adopted Google's 2029 target, including post-quantum authentication.34 Accounts of Microsoft's plans differ. Several describe a Quantum Safe Program with early adoption by 2029 and full transition by 2033.3431 Another roadmap analysis says Microsoft set 2029 as its deadline in June 2026.1 On the available reporting, 2033 for full completion looks like the safer reading.

Qubit roadmaps converge on 2029

The list's emphasis on quantum leadership matches the major hardware roadmaps. IBM plans to reach Starling in 2029, a fault-tolerant machine running 100 million gates on 200 logical qubits. It goes through Loon, Kookaburra and Cockatoo along the way.1 IBM delivered the 120-qubit Nighthawk processor and the Loon test chip in November 2025. It has said it expects the first verified cases of quantum advantage by the end of 2026. As of late September, it had not announced Kookaburra.1 In July, IBM and its collaborators released three quantum-advantage papers based on the 156-qubit Heron processor. IEEE Spectrum reported that none had been peer reviewed.2

Quantinuum launched its 98-qubit Helios in November 2025. It reported 99.921% two-qubit gate fidelity and 48 error-corrected logical qubits.1 The company raised $1.68 billion in a June 2026 Nasdaq IPO. Its next system, Sol, is due in 2027, and Apollo, its fault-tolerant machine, in 2029.7 Quantinuum also received a finalized $100 million CHIPS R&D award in September. The program covers low-loss integrated photonics and advanced ion traps.4 That overlap shows how two of the list's new additions, quantum and integrated photonics, depend on each other in actual hardware.

Google showed below-threshold error correction on its 105-qubit Willow chip in December 2024. In March 2026 it added a neutral-atom hardware team in Boulder.1 IonQ opened orders in September for its 256-qubit Superion platform, with deliveries planned for 2027. These are the company's own claims.2 QuEra reported up to 96 logical qubits on neutral-atom hardware. One assessment cautions that this figure is a single-experiment peak, not a settled record.36

The bottom line

The 2026 list is more than a cleanup. It narrows federal technology attention to areas where Washington thinks the market will not deliver security on its own. In quantum, that means two jobs at once: building the machines and preparing for what they could break. Federal cryptography deadlines now fall in 2030 and 2031. Google and Cloudflare are aiming for 2029. IBM and Quantinuum both target fault tolerance in 2029. The next useful checkpoints are whether IBM ships Kookaburra on time and what the contractor rule says when it arrives in December. These will matter more than the list itself.