Federal Agencies Face Challenges in Post-Quantum Cryptography Migration for Smart Identity Cards
Federal agencies are encountering significant hurdles in their efforts to migrate to post-quantum cryptography (PQC), particularly concerning the integration with smart identity cards like Personal Identity Verification (PIV) and Common Access Cards (CACs). The Office of Management and Budget (OMB) and the Office of the National Cyber Director have mandated that agencies submit their PQC migration plans by the end of October. However, experts from the Department of Defense (DoD), Cybersecurity and Infrastructure Security Agency (CISA), and the National Institute of Standards and Technology (NIST) indicate that many agencies are behind schedule. A primary issue is the lack of a comprehensive inventory of cryptographic systems, which is crucial for effective planning and risk assessment. Patrick Manley, CISA's lead for quantum security, highlighted that current inventory processes are often inconsistent and treated as mere compliance checks rather than tools for true visibility. Britta Hale, DoD's director o...
