Maintaining national security and economic growth is one of the pillars of the national quantum strategy. National security needs often drive the advancement of new science and technology and enable economic development through enhanced Government investments, dedicated initiatives, and cross-agency collaborations. It is imperative that while developing the quantum information science (QIS) enterprise in the United States, the Government also protects intellectual property and economic interests, seeks to understand dual-use capabilities of quantum technologies, and supports national-security-relevant applications that emerge from QIS research at every level from basic research to commercialization.
National Security Memorandum on Quantum-Resistant Cryptography
On May 4, 2022, the President signed National Security Memorandum 10, National Security Memorandum on Promoting United States Leadership in Quantum Computing While Mitigating Risks to Vulnerable Cryptographic Systems. It outlines the Administration’s policy toward quantum computing, gives strategies to promote the emerging technology, prioritizes mitigating risks to encryption, and ensures protection of intellectual property:
- Overview: Quantum computing holds the potential to drive innovations across the American economy, yet it also poses significant risks to the economic and national security of the United States. To balance these, it is the policy of the United States (1) to maintain United States leadership in QIS; and (2) transition to quantum-resistant cryptography in a timely and equitable manner.
- Promoting quantum innovation: The United States should continue to pursue a whole-of-government strategy to harness the benefits of QIS, garner security enhancements provided by quantum-resistant cryptography, encourage transformative and fundamental scientific discoveries through investments in core QIS research programs, seek to foster the next generation of scientists and engineers with quantum-relevant skill sets, and promote domestic partnerships and professional and academic collaborations with overseas allies and partners.
- Mitigating cybersecurity risks: The timely and equitable transition of cryptographic systems to quantum-resistant encryption must be prioritized. Central to this effort will be an emphasis on cryptographic agility, to reduce the transition time and to allow for updates for future cryptographic standards. A series of deadlines for federal agencies to support the transition was established.
- Protecting sensitive technology: The United States Government must work to safeguard relevant quantum research and development and intellectual property and to protect relevant enabling technologies and materials. Agencies responsible for either promoting or protecting quantum technologies should understand the security implications. The United States should ensure the protection of United States developed quantum technologies from theft by our adversaries.
CYBERSECURITY AND QUANTUM COMPUTING
White House Event on Securing Our Nation with Post Quantum Cryptography
On August 13, 2024, the White House, in partnership with the National Institute of Standards and Technology (NIST), convened White House Officials, agency representatives, and industry partners to discuss progress to safeguard critical information infrastructure against the threat of a future large-scale, cryptographically relevant quantum computer. The event included remarks from White House and NIST officials announcing NIST’s new Post Quantum Cryptography (PQC) standards, a set of encryption algorithms designed to withstand cyberattacks from a quantum computer. The announcement was followed by a roundtable discussion with industry leaders focused on how to facilitate the transition to PQC and overcome institutional barriers to implementation.
More information about the NIST announcement and PQC standards is detailed in this blog post.
Workshop: Cybersecurity of Quantum Computing
The Workshop on Cybersecurity of Quantum Computing, which took place on September 29 and 30, 2022, brought together roughly forty experts from the cybersecurity and quantum computing communities to explore how quantum computing intellectual property can be protected, mechanisms to ensure that quantum computers are not used for illicit purposes, and opportunities for research on the cybersecurity of quantum computers.
Participants noted that in cybersecurity, the best practice is to design systems with security in mind, rather than waiting until systems are developed to incorporate security considerations. They expressed the view that research programs that address the cybersecurity of quantum computing should be launched while quantum computers are still nascent. Breakout teams composed of both security and quantum computing experts identified research opportunities. Participants lauded the opportunity to engage early in discussions about quantum computer security, and they agreed that there are interesting and important research problems in this new field.
A summary of the workshop is available here.
PROTECTING QIS INVESTMENTS
There are a number of additional activities across the Government aimed at providing protections for sensitive QIS technologies from use by adversarial actors. Some examples of these activities are:
- The National Science and Technology Council Subcommittee on the Economic and Security Implications of Quantum Science (ESIX) is an interagency body that convenes to discuss and coordinate on topics related to the security implications of QIS technologies. As an example, ESIX has played a role in ensuring the Technology Protection Plans required under National Security Memorandum 10 appropriately balance technology protection with the need to innovate.
- In September 2024, in concert with international partners, the U.S. Department of Commerce Bureau of Industry and Security released an interim final rule on export controls for certain quantum technologies. More information about the interim final rule can be found in this blog post.
- In October 2024, the Department of the Treasury issued a Final Rule: Addressing United States Investments in Certain National Security Technologies and Products in Countries of Concern (the Outbound Order). Quantum information technologies are identified in the Outbound Order as one of the technologies and products relevant to the prohibition and notification requirement. More information about the Outbound Order can be found at this link.