Topics
18 signals
GSA’s Federal Acquisition Service is seeking information on commercial products and services that could help agencies migrate to post-quantum cryptography. Responses are due December 7, 2026; the RFI is market research only and does not promise funded work or a follow-on solicitation.
Red Hat’s RHEL 10.3 release adds sealed images for Image Mode, post-quantum cryptography features aligned with CNSA 2.0 requirements, and self-managed AI assistance for disconnected environments. This is a product update, not a procurement award or solicitation, but it may inform federal technology evaluations, security reviews, and deployment planning.
NIST has finalized ML-DSA (FIPS 204) and SLH-DSA (FIPS 205), while FN-DSA remains unpublished and nine additional candidates continue through evaluation. Federal agencies have a December 31, 2031 target for migrating digital signatures, creating a planning window for suppliers to document support, algorithm agility, and upgrade paths.
IonQ completed its all-stock acquisition of Elisity on November 4, 2026, combining identity-based Zero Trust security with post-quantum cryptography and quantum key distribution. The transaction is not a government contract or solicitation, but federal buyers and contractors can assess the expanded offering as they plan cybersecurity architectures for current and quantum-era threats.
Federal agencies are preparing to migrate specified systems to post-quantum cryptography (PQC) under applicable deadlines, creating potential demand for cryptographic inventories, risk assessments, upgrades, and transition support. NIST and OMB are involved in the U.S. effort, while European and UK roadmaps have separate milestones; no solicitation, award, funding value, or procurement contact is identified.
A research review finds that post-quantum cryptography tools and standards are not yet matched by integrated practices for software development, deployment, and maintenance. The findings point to potential demand for lifecycle migration planning, training, testing, and real-world validation, but identify no solicitation, funding, or migration deadline.
RJ Lee Group and Carahsoft are offering passwordless authentication and post-quantum data-protection products to public-sector buyers through reseller partners, NASA SEWP V and E&I Cooperative Services. The announcement creates an existing-vehicle purchasing route—not a new solicitation or award—so agencies should confirm eligibility, pricing and technical fit with resellers.
NIST finalized IR 8547, establishing a staged federal path to replace quantum-vulnerable cryptography across interconnected infrastructure. Suppliers and agencies should assess product dependencies and account for hardware lead times as they plan toward key-establishment adoption by 2030, digital-signature adoption by 2031, and broader migration by 2035.
The NSA, CISA and Australia’s ASD’s ACSC released vendor-neutral questions to help organizations assess third-party readiness for post-quantum cryptography. Procurement teams can apply them in sourcing, renewals and ongoing vendor assurance to identify cryptographic dependencies and transition risks; the guidance is voluntary, not a solicitation or compliance mandate.
IBM launched Quantum Safe tools to inventory cryptographic dependencies, identify vulnerabilities, and plan post-quantum cryptography migration. NIST’s final IR 8547 guidance sets 2035 as the federal transition target, with earlier 2030 key-exchange and 2031 digital-signature deadlines for the most critical systems; no federal solicitation, award, or endorsement of IBM is identified.
SAIC announced an end-to-end portfolio covering quantum sensing, optimization, optical interconnects, and post-quantum cryptography migration after more than two years of investment, engineering, and testing. The move comes as GAO reports that none of 24 major agencies is fully prepared for quantum-resistant cryptography, but SAIC disclosed no specific solicitation, award, funding, or procurement timeline.
Booz Allen’s Dr. Jordan Kenyon says federal quantum readiness requires agencies to move beyond cryptographic inventories and build the acquisition, workforce, engineering, and operational capacity to implement solutions. The source describes PQC milestones and a cited estimate exceeding $7 billion for federal non-national security system transitions, but identifies no current solicitation or funded opportunity.
Federal agencies are coordinating post-quantum cryptography readiness, with staged deadlines running through 2035 and near-term priorities that include system inventories, migration plans, and pilots. The effort signals potential demand for discovery, engineering, migration, testing, and workforce support, but no specific solicitation or award is identified.
NIST’s final NISTIR 8547 guidance sets December 31, 2030, for post-quantum key-establishment migration and December 31, 2031, for digital signatures on federal high-value assets and high-impact systems, with broader migration targeted by 2035. Federal contractors should inventory cryptographic dependencies, update product roadmaps, and prepare for procurement needs in implementation, interoperability, and supply-chain assessment.
MarketsandMarkets projects the cryptography market will expand from $0.60 billion in 2026 to $3.80 billion by 2031, representing a 44.5% compound annual growth rate. The forecast points to potential contractor work in quantum-safe security, but identifies no specific federal solicitation, award, funding commitment, or procurement timeline.
Executive Order 14412 and agency guidance elevate post-quantum cryptography (PQC) migration as a federal cybersecurity and acquisition priority, with milestones extending through 2031. Contractors should assess cryptographic dependencies, support approved quantum-resistant algorithms and cryptographic agility, and use the November 10, 2026, Homeland Security Summit as an industry engagement opportunity.
Finalized NIST post-quantum standards create near-term planning, implementation, and validation work for federal contractors, even though proposed RSA and ECC transition dates remain unsettled. Contractors can inventory cryptographic dependencies and assess hybrid ML-KEM pilots while monitoring standards for certificates, TLS, and messaging; no solicitation, award, or contract value is identified.
Federal agencies are scheduled to transition key systems to post-quantum cryptography in stages from December 2030 through 2035, while contractors must meet stated NIST cryptographic standards by December 2030. AI-generated mathematical results have heightened concern about encryption resilience, making cryptographic inventories, implementation reviews, and crypto-agility planning immediate compliance priorities.