



GAO reports that a future quantum computer sufficiently advanced to crack standard encryption, a so-called cryptographically relevant quantum computer, could emerge as soon as the 2030s, and that none of the 24 major federal agencies GAO reviewed have fully completed the preparatory steps needed to migrate to quantum-resistant cryptography.
The gaps include incomplete inventories of vulnerable systems, no clear funding plans, and no testing plans for new algorithms, problems GAO attributes partly to a shortage of in-house cryptography expertise.
GAO issued 89 recommendations across 23 agencies in the sensitive version of this report; twelve agencies agreed, two partially agreed, seven neither agreed nor disagreed, and one disagreed with three of its four recommendations, while GAO stood by every one of them.
The full dispatch is available from the source below.