Securing the Nation Against Advanced Cryptographic Attacks
1. Purpose
Executive Order 14412 aims to bolster protections for sensitive data, critical infrastructure, and the digital economy from emerging threats due to quantum computing by transitioning to post-quantum cryptography (PQC).
2. Key Actions And Directives
- Identify PQC migration leads: Each agency head must identify their PQC migration lead and report contact details to the OMB Director and National Cyber Director within 30 days.
- Review assets for PQC transition: Agencies must review high value assets and high impact systems to ensure transition to PQC for key establishment by December 31, 2030, within 90 days of the order.
- Release guidance on cryptographic materials: Within 270 days, the Secretary of Homeland Security must provide public guidance on minimum elements for a cryptographic bill of materials.
3. Important Points
- Deadline for Transitioning to PQC: All high value assets and high impact systems must transition to post-quantum cryptography by December 31, 2030.
- Interagency Collaboration Required: The Office of Management and Budget and the National Cyber Director are tasked with coordinating the overall national PQC migration strategy.
- Technical Guidance Providers: The Secretary of Commerce, through NIST, and the NSA are responsible for specifying the technical details for implementing PQC.
- No Legal Rights Established: The Executive Order clarifies that it does not create enforceable rights or benefits for individuals against the U.S.
- Publication Costs Responsibility: The Department of Commerce will bear the costs associated with the publication of the Executive Order.
Disclaimer: ExecBrief's are AI generated, Please verify with the original source to confirm
Click here to provide feedback to help us improve your experience!
Comments