GAO Reports Federal Agencies Unprepared for Quantum Computing Threat to Encryption
The Government Accountability Office (GAO) has issued a report indicating that federal agencies are not adequately prepared for the emergence of cryptographically relevant quantum computers (CRQCs). These advanced quantum computers, anticipated to be developed by the 2030s, could potentially break current federal encryption methods, leaving sensitive government data vulnerable. The GAO's evaluation framework identified three critical practices that agencies should implement: establishing cryptography expertise, developing comprehensive inventories of cryptographic systems, and creating detailed plans for testing quantum-resistant algorithms. However, the GAO found that none of the 24 Chief Financial Officer Act agencies had fully implemented these essential practices. This lack of foundational preparedness leaves agencies ill-equipped to defend against potential quantum attacks, which could compromise user authentication systems, grant unauthorized access to sensitive information, and decrypt previously ac...
