Trump’s Quantum Orders Turn Post-Quantum Cryptography Into a U.S.-China Security Race
U.S. Technology, Security & Industrial Policy Column
Trump’s Quantum Orders
Turn Encryption Into
Industrial Policy.
Washington has issued two quantum executive orders at once: one to protect America from future quantum attacks, and another to accelerate the quantum machines that could make those attacks possible. That is not a contradiction. It is the new logic of technological power.
The United States has decided that quantum technology is no longer only a scientific project. It is now a cybersecurity problem, an industrial-policy problem, a supply-chain problem, a counterintelligence problem, and a strategic competition problem with China.
On June 22, President Donald Trump signed two executive orders that should be read together. The first accelerates the migration of federal systems toward post-quantum cryptography, or PQC. The second launches a national effort to build a quantum computer powerful enough to support meaningful scientific discovery and strategic applications.
One order assumes that a future quantum computer may break today’s encryption. The other tries to ensure that the quantum computer capable of doing more advanced tasks is built, controlled, and commercialized first by the United States.
This is the core message: America intends to build the next strategic computing platform while simultaneously hardening its own digital infrastructure against that platform’s destructive potential.
The quantum race is no longer about who builds the most impressive laboratory machine. It is about who controls the technology that can discover new science, reshape industry, and expose old encryption.
Two executive orders, one strategic message
The first executive order is focused on defense. It directs the federal government to accelerate its migration to NIST-approved post-quantum cryptography standards.
The second is focused on offense, innovation, and industrial capacity. It creates the Quantum Computer for Application Development and Discovery Science effort, known as QC-ADDS. The initiative is designed to push the United States toward a quantum computer capable of tackling scientific problems beyond the reach of classical systems.
Together, the orders reveal how Washington now sees quantum technology.
Quantum computing is not being treated as a distant research field. It is being treated like semiconductors, artificial intelligence, advanced materials, satellite systems, or nuclear technology: a dual-use capability with commercial upside and national-security consequences.
The United States is therefore pursuing three goals at the same time.
First, it wants to prevent adversaries from exploiting the future weakness of today’s digital infrastructure. Second, it wants to build domestic quantum hardware, supply chains, and talent. Third, it wants to stop China and other adversaries from gaining access to the underlying technology, know-how, manufacturing capacity, and research ecosystem.
This is not merely a cybersecurity policy. It is a national technology strategy.
Why cryptography suddenly feels urgent
Much of the modern digital economy depends on public-key cryptography.
Banking systems use it. Government networks use it. Cloud providers use it. Online shopping uses it. Software updates use it. Digital signatures use it. Military systems, corporate networks, identity systems, medical records, and industrial controls all depend on it in one form or another.
Widely used systems such as RSA and elliptic-curve cryptography are considered secure against classical computers because the mathematical problems behind them are extremely difficult to solve with conventional hardware.
A sufficiently capable quantum computer changes that assumption.
Shor’s algorithm could, in principle, factor large integers and solve discrete logarithm problems efficiently. Those are exactly the types of mathematical problems that support much of today’s public-key security.
The immediate danger is not that a quantum computer can already crack every bank account or government system. It cannot. The more urgent danger is the “harvest now, decrypt later” problem.
An adversary can collect encrypted data today, store it for years, and wait for a future quantum computer to become capable enough to decrypt it.
Some information loses value quickly. A short-lived commercial transaction may not matter much ten years later. But diplomatic cables, military plans, intelligence sources, medical data, corporate research, intellectual property, energy infrastructure information, and long-term identity records may remain valuable for decades.
The real quantum threat is not only what can be stolen tomorrow. It is what is being collected today for decryption in the future.
Craig Gidney’s paper changed the timing debate
The urgency around PQC has been growing for years. But recent technical work made the threat look less distant.
In May 2025, Google Quantum AI researcher Craig Gidney published a paper estimating that RSA-2048 could be factored in less than a week using fewer than one million noisy physical qubits under specific assumptions about hardware quality, error correction, and control systems.
The number attracted attention because an earlier 2019 estimate had suggested roughly 20 million noisy qubits for a comparable attack.
The point is not that someone has built such a machine. No public system today is remotely close to reliably performing this task at the required scale.
The point is that the engineering target moved.
If the number of qubits and the scale of error correction needed to attack RSA fall sharply, the distance between theoretical vulnerability and practical vulnerability becomes smaller.
That changes how governments should think.
A country does not wait until a quantum computer arrives before replacing vulnerable cryptography. Large systems take years to inventory, redesign, test, certify, deploy, and update. In the federal government, critical infrastructure, defense contractors, banks, cloud services, and legacy industrial systems, the migration timeline may be longer than the quantum-hardware timeline.
That is why PQC is becoming urgent before the quantum computer itself exists.
What the PQC executive order actually changes
The PQC order does more than tell agencies to “prepare.” It creates deadlines, roles, procurement pressure, and a government-wide migration structure.
Agencies must designate a PQC migration lead. They must inventory their high-value assets and high-impact systems. They must develop migration plans. They must coordinate with the Office of Management and Budget, the National Cyber Director, NIST, CISA, and the National Security Agency.
The deadlines are concrete.
High-value and high-impact systems are expected to transition to PQC for key establishment by the end of 2030. The deadline for PQC digital signatures is the end of 2031.
That distinction matters.
Key establishment is the process by which systems securely create or exchange the keys used to protect communications. Digital signatures are used to verify identity, authenticate software, validate transactions, and confirm that a message or update came from a trusted source.
Both are essential. But each creates its own migration challenge.
A government agency cannot simply install one new application and declare itself quantum-safe. It must find every vulnerable cryptographic dependency in its hardware, software, cloud services, embedded systems, vendor products, and data flows.
In practice, the challenge is less about choosing a mathematical algorithm and more about finding where old algorithms are hiding.
Post-quantum migration is not a software patch. It is a national inventory of every place where trust depends on old mathematics.
Why America is betting on PQC instead of QKD
The United States and China are often described as pursuing different quantum-security strategies. There is truth in that description, but the contrast should not be oversimplified.
China has invested heavily in quantum key distribution, or QKD. QKD uses quantum properties to help two parties establish shared secret keys. China has built major fiber-based quantum communication networks and has demonstrated satellite-linked quantum communication.
That strategy favors a country that can build and control infrastructure. QKD requires specialized hardware, trusted network architecture, dedicated links, and careful operational design. It is therefore particularly suited to selected high-security applications, government networks, strategic facilities, and controlled communications environments.
The United States is taking a different primary route. PQC runs on classical hardware and is based on mathematical problems believed to remain hard even for quantum computers. It can be deployed through upgrades to software, protocols, hardware modules, cloud systems, and enterprise products.
That scalability is the key American advantage.
The United States does not need to construct an entirely new physical quantum network to protect every browser session, payment system, cloud service, military supplier, or corporate database. It can push standards through NIST, procurement rules, cloud providers, chipmakers, software vendors, and global internet protocols.
This fits the American technology model: set the standards, make them commercially deployable, embed them in global products, and use the scale of U.S. software and cloud platforms to spread them.
QKD may remain useful in selected high-assurance cases. But PQC is the practical baseline for broad migration across a modern digital economy.
China’s advantage is physical quantum-security infrastructure. America’s advantage is the ability to turn cryptographic standards into global software infrastructure.
QKD and PQC are not enemies. But they are not equal substitutes.
There is a temptation to describe QKD and PQC as two competing versions of the same thing. That is not quite right.
QKD addresses the distribution of secret keys using quantum physics. PQC provides quantum-resistant mathematical methods for encryption, key establishment, and digital signatures on classical systems.
They can be combined. A government, defense network, financial institution, or critical infrastructure operator may use QKD for a limited high-security communications link while also using PQC to protect authentication, signatures, identity, and broader network security.
But QKD does not replace all the functions of modern cryptography. It does not eliminate the need for secure endpoints. It does not automatically authenticate every participant. It does not solve software-supply-chain risk. It does not remove the need for digital signatures. And it is not easy to deploy at internet scale.
That is why the global transition is likely to be layered rather than binary.
PQC will become the broad foundation. Hybrid systems may combine traditional and post-quantum methods during the transition. QKD may be added in selected critical environments where the cost and infrastructure requirements are justified.
The likely future is not “QKD versus PQC.” It is PQC everywhere that can use it, QKD where its unique properties justify the cost, and hybrid architectures where organizations want redundancy against unknown weaknesses.
The second order is not about cybersecurity. It is about building power.
The QC-ADDS executive order is aimed at a different problem.
It recognizes that a quantum computer capable of practical scientific discovery could have major implications for materials science, chemistry, energy, biology, defense, logistics, sensing, and industrial design.
The order calls for a national effort to develop at least one advanced quantum computer for a Department of Energy facility, with the intention of making it available to the scientific community where possible.
This is significant because Washington is no longer waiting for private firms to decide when quantum computing is commercially ready. The government wants to become an anchor customer, a technical coordinator, a supply-chain organizer, and a national-security backstop.
The model resembles the logic behind earlier American technology programs. Government demand helped shape aviation, semiconductors, GPS, the internet, space systems, and advanced computing.
The government does not need to know which quantum hardware architecture will ultimately win. It can fund multiple paths, create shared manufacturing capacity, define benchmarks, support test facilities, and guarantee that a domestic market exists for successful systems.
That is exactly what QC-ADDS begins to build.
QC-ADDS is not simply a government computer project. It is an attempt to create the industrial system required to make quantum computing strategically real.
Washington is building an ecosystem, not choosing one winner
Quantum computing remains technologically unsettled.
Different companies are pursuing different paths: superconducting qubits, trapped ions, neutral atoms, photonics, silicon-spin approaches, quantum annealing, and other architectures.
Each has strengths and weaknesses. One may offer faster operations. Another may offer longer coherence times. Another may be easier to manufacture. Another may be better suited to networking or error correction.
The United States cannot know with certainty which architecture will dominate. That is why the Commerce Department’s recent quantum funding package was designed as a portfolio rather than a single bet.
The government announced planned incentives totaling roughly $2 billion for nine companies. IBM was allocated $1 billion for a new quantum foundry subsidiary, while GlobalFoundries was allocated $375 million for domestic quantum manufacturing capacity. Other companies, including D-Wave, Rigetti, Infleqtion, Atom Computing, PsiQuantum, and Quantinuum, were slated for approximately $100 million each, with Diraq receiving a smaller planned award.
The government is also seeking minority, non-controlling equity stakes as part of the arrangement.
This is a major shift in tone. Washington is not behaving like a distant grant agency. It is behaving more like a strategic investor trying to build a domestic quantum supply chain before the technology matures.
The goal is not only to fund algorithms. It is to secure foundries, cryogenic systems, control electronics, photonic components, materials, packaging, fabrication capacity, workforce pipelines, and trusted suppliers.
In quantum technology, the hardware stack matters as much as the software.
Why IBM and Google matter
IBM and Google occupy different but complementary positions in the U.S. quantum race.
IBM has been one of the most visible builders of superconducting quantum hardware. It has spent years developing quantum processors, error-correction roadmaps, software tools, cloud access, and an ecosystem around quantum computing.
Google has played a different role. It has made high-profile research advances in quantum error correction and algorithmic resource estimation. Craig Gidney’s RSA paper is part of that broader intellectual role: showing policymakers and industry how the practical threshold for cryptographic risk may move faster than older estimates implied.
The two companies therefore represent two sides of Washington’s quantum strategy.
IBM represents hardware, manufacturing, foundry capacity, and an enterprise quantum ecosystem. Google represents algorithms, error correction, research credibility, and the software intelligence required to turn qubits into useful computational power.
That is why major private-sector quantum companies matter in a White House policy event. The government cannot execute this strategy alone.
It needs companies that can build chips, fabricate components, operate cloud systems, develop control electronics, recruit researchers, prove benchmarks, and eventually turn federal support into commercial products.
The executive orders are therefore not only instructions to agencies. They are signals to the private sector: quantum has moved closer to the center of U.S. national strategy.
The counterintelligence clause may be the most important line
One of the most consequential parts of the quantum order is not about qubits or research grants. It is about espionage.
The order directs the FBI, intelligence agencies, national-security officials, and relevant departments to expand protection for the U.S. quantum ecosystem against adversarial threats.
This includes cybersecurity threats, research-security risks, technology theft, supply-chain exposure, and the transfer of critical expertise.
That language matters because it elevates quantum technology from a promising industry to a protected strategic asset.
The United States has already taken a similar path with advanced semiconductors, artificial intelligence, aerospace, biotechnology, telecommunications, rare earths, and critical manufacturing equipment.
Quantum is now entering the same category.
This will likely mean tighter research-security rules, more scrutiny of foreign investment, stronger export-control discussions, increased monitoring of academic partnerships, and more pressure on allies to align their technology-protection policies with Washington.
The policy is not merely about preventing China from buying a quantum computer. It is about preventing the transfer of the hidden components of leadership: talent, fabrication methods, error-correction insight, materials, supplier relationships, technical data, and manufacturing know-how.
In the quantum race, the machine is only the visible prize. The deeper prize is the ecosystem that makes the machine possible.
China’s advantage is scale, patience, and infrastructure
China is not competing with the United States using the same playbook.
Beijing has made quantum communication a state priority for years. It has invested in QKD networks, trusted relay systems, fiber infrastructure, metropolitan networks, and satellite-enabled communication demonstrations.
China’s strategy is well suited to a centralized system. The state can coordinate telecom operators, research institutions, local governments, defense organizations, and national infrastructure projects.
That gives China an advantage in building physical quantum communications networks. It can fund long-distance links even when the immediate commercial return is uncertain. It can build strategic networks first and worry about mass-market economics later.
The U.S. advantage is different. America has deeper private capital markets, world-leading cloud platforms, advanced software companies, semiconductor design expertise, major national laboratories, and a stronger tradition of commercializing scientific tools.
The race is therefore not simply about who has more qubits.
China may be ahead in certain areas of quantum communications infrastructure. The United States may be stronger in the commercial software, hardware, cloud, and standards ecosystem needed to turn quantum capability into globally adopted products.
The two countries are competing across different layers of the stack.
America’s real weapon is standards power
The most underappreciated U.S. advantage may not be quantum hardware. It may be standards.
NIST standards influence federal agencies, defense contractors, banks, cloud providers, security vendors, software companies, telecom firms, and international partners. Once NIST finalizes a standard and the U.S. government requires it in procurement, that standard can spread through the global technology market.
This is especially important for PQC.
A secure algorithm is useful. A secure algorithm embedded into browsers, cloud systems, payment networks, enterprise software, chips, cryptographic libraries, and global protocols is much more powerful.
The United States understands this. It does not need every country to adopt U.S. quantum hardware. It needs the world’s systems to use cryptographic standards shaped by U.S. institutions and U.S.-aligned technology companies.
That creates long-term influence.
The winner of the quantum-security race may not be the country that first demonstrates the most spectacular machine. It may be the country whose algorithms, protocols, suppliers, and security rules become embedded in the global digital economy.
The hard part begins after the announcement
Executive orders can create urgency. They cannot automatically create quantum computers or modernize old infrastructure.
The PQC transition will be difficult because many organizations do not know where all their cryptography is located. Old encryption can be embedded in routers, industrial control systems, medical devices, embedded chips, legacy databases, proprietary protocols, third-party software, and long-lived hardware.
The quantum-computing effort will be difficult because error correction remains a formidable challenge. A quantum processor with many physical qubits is not automatically useful. It needs reliable logical qubits, stable control systems, low error rates, scalable manufacturing, and software capable of running valuable algorithms.
The industrial-policy effort will be difficult because government money cannot eliminate technical uncertainty. Some quantum architectures may fail. Some companies may miss milestones. Some funding decisions may look obvious only in hindsight.
But that uncertainty is precisely why Washington is using a portfolio approach. It is not betting that one company has already solved quantum computing. It is betting that the United States must own enough of the manufacturing, talent, standards, research, and supply chain to remain competitive regardless of which architecture wins.
What investors should watch next
The first issue is implementation. The PQC order matters only if agencies actually identify vulnerable systems, set budgets, change procurement rules, and force vendors to modernize.
The second is the NIST pilot. The order requires NIST to launch a PQC migration pilot on selected systems and complete it by the end of 2027. That pilot could become a practical model for the rest of government and eventually the private sector.
The third is the technical definition of QC-ADDS. The Department of Energy is expected to identify the specifications needed for a quantum computer capable of transformational scientific applications. That definition will show what Washington means by a practically significant machine.
The fourth is the funding structure. The government has signaled that it may use partnerships, advance market commitments, foundry support, and equity stakes. This means quantum may increasingly trade like a strategic-industry theme rather than a pure research theme.
The fifth is export control and counterintelligence. As quantum becomes more strategically sensitive, research collaboration and cross-border investment may face more scrutiny.
The sixth is China’s response. China may accelerate quantum communications infrastructure, domestic hardware development, standards activity, and partnerships with countries seeking alternatives to U.S.-led technology systems.
Conclusion: America is preparing for both Q-Day and the quantum economy
The two executive orders should be seen as one strategy.
The first assumes that quantum computing will eventually threaten current encryption. The second assumes that quantum computing will eventually create scientific, commercial, and military advantages.
America wants to be protected from the first outcome and dominant in the second.
That is why PQC, QC-ADDS, foundry funding, counterintelligence, workforce policy, supply chains, and international alliances all appear in the same policy framework.
Washington is no longer talking about quantum as an interesting technology of the future. It is treating quantum as a field where the future must be secured before it arrives.
The United States may not know exactly when a cryptographically relevant quantum computer will exist. But it has decided that waiting for certainty would be a strategic mistake.
The simplest way to read Trump’s two quantum orders is this: America is trying to build the machine, secure itself against the machine, and prevent China from gaining control over the ecosystem that makes the machine possible.
Related Reading 🔗
- The White House – Securing the Nation Against Advanced Cryptographic Attacks
- The White House – Ushering in the Next Frontier of Quantum Innovation
- NIST – Post-Quantum Cryptography Standards and Migration Resources
- Craig Gidney – How to Factor 2048-Bit RSA Integers With Less Than a Million Noisy Qubits
- U.S. Commerce Department – Proposed $2 Billion Quantum Investment Portfolio
- Nature – Implementation of Carrier-Grade Quantum Communication Networks in China
.png)