Quantum risk in defence and national security

CNSA 2.0 is the NSA's Commercial National Security Algorithm Suite 2.0, published in September 2022. It names the quantum-resistant algorithms for US national security systems: ML-KEM-1024 for key establishment, ML-DSA-87 for signatures, LMS and XMSS for software and firmware signing, AES-256 and SHA-384 or SHA-512. It binds owners and operators of national security systems, and reaches any vendor whose product goes into one, which is how it lands on primes and their sub-tier suppliers.

The CNSA 2.0 FAQ sets two dates per product category. Software and firmware signing: support and prefer by 2025, exclusive by 2030. Web browsers, servers and cloud services: 2025 and 2033. Traditional networking equipment such as VPNs and routers: 2026 and 2030. Operating systems: 2027 and 2033. Niche equipment: 2030 and 2033. Custom applications and legacy equipment: update or replace by 2033. New national security system acquisitions must be CNSA 2.0 compliant from 1 January 2027, and the overall NSM-10 target is 2035.

Directly, only if you own or operate a national security system. In practice it reaches you through your prime: any product, firmware or PKI component that ends up in a national security system has to meet the CNSA 2.0 dates for its category, and primes are starting to flow that down in contracts and acceptance criteria. Our sub-tier supplier guide covers what to do when your prime has not told you yet.

Two documents. The Commission Recommendation of 11 April 2024 asks each Member State to adopt a national post-quantum strategy and to deploy PQC, hybrid where needed, across public administration and critical infrastructure. The Coordinated Implementation Roadmap of 23 June 2025, agreed through the NIS Cooperation Group, sets the dates: national roadmaps and first steps by the end of 2026, high-risk use cases migrated by the end of 2030, and as many systems as feasible by the end of 2035. Defence ministries sit outside NIS2, but national roadmaps, procurement rules and the agencies that certify cryptographic products apply those dates to defence programmes and suppliers.

Hybrid. CNSA 2.0 treats hybrid constructions as an interim option; BSI's TR-02102-1 and ANSSI's position papers call for post-quantum algorithms to be combined with a classical scheme, and ANSSI requires hybrid constructions for the security visas it issues during the transition. A supplier selling into both markets needs a product that can run hybrid for European certification and pure ML-KEM-1024 and ML-DSA-87 for US national security systems. The Dutch PQC Migration Handbook from AIVD, CWI and TNO is the most practical step-by-step guide published by a European agency.

Not today. CMMC Level 2 assesses the 110 NIST SP 800-171 requirements, and Level 3 adds SP 800-172 controls; neither grades post-quantum progress. The programme rule took effect on 16 December 2024 and the DFARS acquisition rule on 10 November 2025. Executive Order 14412 of June 2026 is the signal to watch: it orders a proposed FAR rule requiring contractors to meet PQC-compliant FIPS by 31 December 2030.

Because the data lives longer. Under Executive Order 13526, classified records are declassified at 25 years by default, with exemptions to 50 or 75 years for human sources, WMD design information and cryptologic methods. UK records transfer at 20 years and security and intelligence files are often retained far longer. Traffic recorded in 2026 and read in the 2030s still falls well inside those windows.

C2, SATCOM and tactical data links authenticate and establish keys with public-key cryptography, so recorded traffic is readable once a cryptographically relevant quantum computer exists. The added problem is interoperability: a link only migrates when both ends do, which puts allies, coalition partners and link providers on your critical path. The SATCOM and C2 readiness assessor gives you a first score in ten questions.

NATO's Quantum Technologies Strategy, summarised in January 2024, lists the transition of the Alliance's cryptographic systems to quantum-safe cryptography as a desired outcome, commits to research into quantum-safe communications across air, space, cyber, land and maritime domains, names quantum sensing for positioning, navigation and timing without GNSS, and establishes a Transatlantic Quantum Community. The Quantum Technology Roadmap of 29 September 2026 turns that into dates: a Quantum Zero Beacon pilot between NATO HQ in Brussels and SHAPE in Mons for Q4 2027, an industry readiness study for quantum-resistant cryptography in Q2 2027, a refreshed action plan on the quantum threat to cryptography in Q3 2027 and an Alliance quantum standards roadmap by Q3 2029, with adoption of post-quantum standards listed as ongoing.

Industry Security Notice 2023/09 of 21 July 2023 applies Secure by Design to the acquisition, development and maintenance of networks, applications, platforms and weapon systems for the MOD. The Senior Responsible Owner is accountable for cyber secure outcomes through the capability's life, continuous risk management replaces point-in-time accreditation, and engaging and managing the supply chain is one of the seven principles. Suppliers are assured through the Cyber Security Model and Def Stan 05-138.

Not on its own. QKD can establish keys over a dedicated optical or satellite channel, and several of our lectures cover defence deployments, but it does not authenticate, does not sign firmware and does not run on a tactical radio. CNSA 2.0 and the NCSC both point to post-quantum algorithms as the baseline. Treat QKD as a complement for specific high-assurance links, not as a substitute for the migration. NATO's October 2026 position paper on QKD, and the earlier joint paper from BSI, ANSSI and their Dutch and Swedish counterparts, both set out why QKD does not yet meet the bar for classified traffic.

With a cryptographic inventory of C2, secure communications, firmware signing and the systems holding classified or controlled data; a map of which data must stay secret beyond 2030 against the algorithms protecting it; each system placed in its CNSA 2.0 category; and roadmaps requested from every prime, sub-tier supplier and link provider. Those four give the SRO or programme board the evidence to set priorities.

Everything on this page. The two-minute readiness check scores your defence and national security programme and routes you to the right next step. The free tools, including the SATCOM and C2 Cryptographic Readiness Assessor and the HNDL Risk Calculator, run in your browser with no registration. The weekly peer call runs every Tuesday at 15:00 CET and is open to anyone. Sample lectures from the 170-plus expert library are linked above, and the page is reviewed as the mandates change; the date beside the key facts is the last check.

It depends on the role. SROs, directors and programme boards start with the Certified Quantum Business Professional bootcamp, about 22 hours self-paced across ten modules. Security, COMSEC and IT teams take Introduction to Quantum Cyber Security, four to five hours online with a QSECDEF certificate. C2 architects and secure communications leads take Securing C2 (Command and Control) Systems, the sector course for command and control, SATCOM and tactical links. Whoever will run the migration takes CPQCPM, the Certified Post Quantum Cryptography Programme Manager course: ten hours live online over five weeks, with the next public cohort in January 2027.

Yes. QSECDEF runs private CPQCPM cohorts for a single organisation, live online or in person, and private deliveries of the sector courses listed under Equip your people for your C2 and secure communications teams. Board and leadership workshops are built on your own exposure and obligations and end with an agreed position on quantum risk. Use the contact button in the For your organisation section and tell us your timeline.

Through the QSECDEF Expert Members directory. Every listed member has been vetted, has signed the Members' Charter and has presented to the community. You can filter by consulting and services, technology vendor or enablement and investment, and send a request for further information from the member's own page. QSECDEF is vendor-neutral and sells training, not migration products, so the shortlist stays yours.

Two routes. QSECDEF membership gives your team the self-paced courses, the full lecture archive, the weekly call and 25 per cent off CPQCPM and partner training. Expert Membership is for the builders, consultancies and technology vendors serving defence and national security who want to be found by the people reading this page; it includes a showcase listing with an enquiry form, the Industry Conversations and speaking slots at the annual QSECDEF symposium.

No. QSECDEF is a vendor-neutral membership network. We train people and connect them with peers and peer-reviewed experts; we do not sell migration software or services.

CPQCPM is ten hours of live instruction over five weeks, two hours a week. The Quantum Cyber Security course is 4 to 5 hours, self-paced. The business bootcamp is self-paced at your own speed. The defence and intelligence courses are listed with their formats on the training pages.