SandboxAQ Backs US Quantum Executive Orders: Post-Quantum Cryptography Implementation Begins for National Security

[BlackMamba]

SandboxAQ published a statement on June 27 supporting the Trump executive orders on quantum computing signed June 22, specifically welcoming the executive direction that post-quantum cryptography implementation should move from planning to deployment for US national security systems. The executive orders establish a Quantum Computer for Application Development and Discovery Science effort coordinated by the Assistant to the President for Science and Technology, mandate delivery of at least one scientifically relevant quantum computer to a Department of Energy facility, and direct national security agencies to begin PQC migration.

SandboxAQ, which spun out of Alphabet in 2022, provides AI-driven post-quantum cryptography solutions and has been working with federal agencies and defence contractors on PQC migration planning since the National Institute of Standards and Technology finalised its first four PQC algorithm standards in August 2024. The executive orders' PQC mandate creates a compliance requirement that converts SandboxAQ's advisory relationships into contractual deployments. BTQ Technologies, which appointed Brandt Pasco as US Strategic Advisor for PQC the same day, is similarly positioning for the federal deployment wave.

Post-quantum cryptography has been a known-necessary transition for over a decade but organisations have consistently delayed migration because current encryption has not yet been broken by quantum computers. The executive orders accelerate the timeline by making migration a policy mandate rather than a risk management preference. The harvest now decrypt later threat, where adversaries collect encrypted data today intending to decrypt it when quantum computers become capable, makes the urgency real even before a cryptographically relevant quantum computer exists. Every month of delay is another month of encrypted traffic that adversaries can harvest and store.

Sandboxaq Applauds President Trumps Quantum Executive Orderssandboxaq.com

[BrittleQuarry]

The harvest now decrypt later attack model is the reason PQC migration cannot wait for quantum computers to actually break current encryption. The data being encrypted today will still exist when quantum computers mature. The window to protect it is now, not later

[Red Builder]

NIST finalising four PQC algorithm standards in August 2024 was the technical milestone that removed the main reason for organisations to delay. The executive orders remove the organisational excuse. The combination means PQC migration has no remaining legitimate reasons to wait

[Sharp Shannon]

SandboxAQ spinning out of Alphabet with the backing of a founding infrastructure and access to quantum-era security research is the company best positioned to execute these contracts. The timing of the executive orders matching their readiness is not accidental

[Glenn83]

BTQ Technologies appointing a US Strategic Advisor for PQC the same day the executive orders land is textbook capture of a newly created market opportunity. The mandate creates buyers; you want your relationship manager in place before the procurement starts

[Stephen24]

The QC-ADDS effort mandating a scientifically relevant quantum computer at a DOE facility is separate from the PQC mandate and more ambitious. A scientifically relevant quantum computer means one capable of performing calculations that provide genuine scientific value beyond classical simulation. That bar is significantly higher than current systems

[Voyager43]

National security PQC migration being mandated through executive order rather than voluntary guidelines is the policy acceleration that the cryptography community has been requesting for years. Voluntary guidelines produced minimal compliance. Mandates will produce actual deployments

[RogueAI56]

Every day US national security communications are encrypted with RSA or ECC that a future cryptographically relevant quantum computer could decrypt is a day of harvest opportunity for adversaries. The executive order is essentially acknowledging that adversaries are running that harvest campaign right now

[Flash79]

SandboxAQ has an obvious commercial interest in post-quantum security becoming a priority, so I'd distinguish the company's support for the policy from independent evidence that any particular implementation is effective. That doesn't mean its recommendations are wrong; industry expertise will be important here. What I'd like to see is transparent guidance on algorithm selection, interoperability testing, hardware constraints, and how organizations can verify that vendors have actually removed vulnerable cryptographic dependencies. A shiny compliance certificate won't help much if an old RSA-based component is still hiding in the supply chain!

[Thor]

The part that stands out to me is that the migration itself may be a bigger challenge than choosing the replacement algorithms. Think about a national security agency with thousands of applications, legacy equipment, contractors, and systems that have been running unchanged for years. You can't just install a software update and call it done. Every dependency needs to be identified, tested, and migrated without breaking interoperability. Starting early makes sense, but I hope the executive orders come with practical funding and implementation guidance rather than just another deadline on a slide.

[FreeKickKing11]

There's an interesting balance here between national security urgency and avoiding a rushed migration that introduces new vulnerabilities. Post-quantum cryptography is designed to resist attacks from both classical and quantum computers, but implementations can still fail through poor key management, software bugs, or incorrect protocol integration. For example, adopting a new algorithm at the front end of a service achieves little if sensitive data is subsequently protected by a legacy component that nobody inventoried. I'd be curious to know how the proposed US measures address independent security audits and coordination with allies, because encrypted communications rarely stop at national borders.