U.S. GSA Unveils Post-Quantum Cryptography (PQC) Migration Strategy to Secure Federal Data and Streamline Procurement

September 20, 2026

U.S. General Services Administration (GSA) USA

Overview

The U.S. General Services Administration (GSA) has announced its pivotal role in the transition to Post-Quantum Cryptography (PQC) to safeguard federal data from quantum computing threats. Federal agencies are establishing clear timelines for inventorying and migrating cryptographic assets to NIST-issued PQC standards. GSA will facilitate the availability of PQC-compliant products and services by educating acquisition personnel and industry, and by integrating PQC requirements into existing procurement vehicles like MAS, GWACs, and EIS.

In Depth

Key Findings

The U.S. General Services Administration (GSA) has declared its central role in facilitating the transition to Post-Quantum Cryptography (PQC) for federal agencies. This strategic move aims to protect sensitive government data from the anticipated cryptographic threats posed by future large-scale quantum computers. The GSA is actively assisting federal entities in establishing clear timelines for inventorying existing cryptographic assets and migrating to PQC standards issued by the National Institute of Standards and Technology (NIST). Furthermore, the GSA is streamlining the procurement process for PQC-compliant products and services to ensure their ready availability.

Technical Details

Post-Quantum Cryptography (PQC) is being developed to counter the threat that large-scale quantum computers, once realized, could efficiently break current classical public-key cryptographic algorithms. The core of GSA’s strategy involves guiding federal agencies to conduct comprehensive inventories of their cryptographic assets used in IT systems and data protection. Following this, agencies will develop migration plans to PQC algorithms that are being standardized by NIST. This process includes identifying cryptographic dependencies within existing systems and applications, and defining a phased roadmap for transitioning to solutions compliant with the new PQC standards. To support this migration, the GSA will integrate PQC requirements into its existing acquisition vehicles, such as Multiple Award Schedules (MAS), Government-Wide Acquisition Contracts (GWACs), and Enterprise Infrastructure Solutions (EIS). This integration will enable government agencies to procure PQC-capable hardware, software, and services efficiently.

Background & Context

The progression of quantum computing is widely recognized to pose a significant threat to current public-key cryptography systems (e.g., RSA and elliptic curve cryptography). These cryptographic systems secure virtually every aspect of modern society, including internet communications, financial transactions, and national security, but could be efficiently broken by quantum algorithms like Shor’s algorithm. To preempt the ‘Harvest Now, Decrypt Later’ scenario, governments and standardization bodies worldwide are accelerating their transition to PQC. The U.S. government has underscored the importance of PQC migration through executive orders and national security memoranda, with the GSA’s role being to concretely drive its implementation. As the agency overseeing federal procurement, the GSA is indispensable in promoting the adoption and widespread use of PQC standards across the federal landscape.

Strategic Significance & Outlook

The GSA’s strategy represents a critical step for the federal government to effectively address quantum threats and ensure the future of cybersecurity. Educational programs for acquisition personnel and industry stakeholders, coupled with the integration of PQC requirements into procurement vehicles, will stimulate both the supply and demand for PQC-compliant products and services in the market. This is expected to encourage private sector companies to accelerate the development and offering of PQC solutions. The transition to PQC is more than just a technical upgrade; it is a strategic endeavor to ensure long-term system resilience and national security. The GSA’s initiatives demonstrate a coordinated and planned approach by the federal government to tackle complex technological challenges, potentially setting a precedent and positively influencing PQC migration in the private sector.

Source: https://www.gsa.gov/technology/it-contract-vehicles-and-purchasing-programs/it-security/postquantum-cryptography

Get our weekly technology intelligence — free

Receive an infographic that lets you judge at a glance whether each field’s analysis report is worth reading.

Subscribe Free — Weekly Tech Intelligence

By subscribing, you’ll receive Troy-Technical’s weekly technology intelligence newsletter.