Briefings

NIST Finalizes Post-Quantum Cryptography Standards; AUKUS Opens Defense Trade for Quantum Technologies

31 August 2024

August 2024 was dominated by two developments that will shape quantum policy for years. NIST published the first three finalized post-quantum cryptography standards, ending an eight-year standardization process and triggering federal migration deadlines. The AUKUS partners simultaneously overhauled defense trade controls, creating a broad ITAR exemption and a UK Open General Licence that ease trilateral sharing of quantum-related defense articles. Turkey approved a dedicated Quantum Technologies Development Centre tied to its defense sector, while the White House released a strategy report on international quantum cooperation that acknowledged growing risks of research nationalism.

United States: NIST Publishes First Three Post-Quantum Cryptography Standards

What happened. On August 13, 2024, NIST published three Federal Information Processing Standards for post-quantum cryptography: FIPS 203 (ML-KEM, for key encapsulation), FIPS 204 (ML-DSA, for digital signatures), and FIPS 205 (SLH-DSA, an alternative hash-based signature scheme). The standards were the product of an eight-year competition that assessed 82 candidate algorithms from 25 countries. A fourth standard based on FALCON (FIPS 206) was planned for release later in 2024. The White House convened officials and industry partners on the same day to discuss PQC migration progress, with Federal CIO Clare Martorana announcing that OMB would release guidance directing agencies to develop prioritized migration plans.

Why it matters. The publication of finalized FIPS standards transforms post-quantum cryptography from a research exercise into an operational requirement. Under National Security Memorandum 10 (May 2022), OMB must issue migration guidance within one year of NIST issuing these standards, meaning federal agencies face a roughly August 2025 deadline to have prioritized transition plans. A White House report released concurrently estimated the government-wide PQC migration cost at $7.1 billion between 2025 and 2035, excluding classified systems. The standards also create a global reference point: allied governments, financial regulators, and standards bodies worldwide will now calibrate their own PQC timelines to these NIST specifications. The NSA’s CNSA 2.0 compliance deadlines require all new National Security Systems to be quantum-safe by January 2027.

What remains unclear. Whether the $7.1 billion cost estimate will survive contact with the actual complexity of legacy system replacement across dozens of agencies. How quickly non-federal critical infrastructure operators (financial services, energy, telecommunications) will begin migration absent explicit regulatory mandates. Whether the lattice-based mathematical assumptions underlying ML-KEM and ML-DSA will hold up over time, given that NIST itself continues evaluating backup algorithms from different mathematical families.

Who should care. Federal agency CIOs and CISOs with NSM-10 obligations. Cybersecurity vendors building PQC migration tooling. Financial regulators tracking quantum risk to encrypted data. Defense contractors handling classified and CUI data. Standards bodies in allied jurisdictions aligning to NIST specifications.

AUKUS: Trilateral Defense Trade Controls Overhauled, Covering Quantum Technologies

What happened. In a coordinated sequence across mid-August, the three AUKUS partners restructured their defense trade controls for trilateral commerce. On August 15, the U.S. State Department certified that Australia and the United Kingdom had implemented export control systems comparable to ITAR. On August 16, the UK published the AUKUS Nations Open General Licence, effective September 1. On August 20, the U.S. Directorate of Defense Trade Controls published an interim final rule creating a new Section 126.7 ITAR exemption enabling the vast majority of commercial defense trade among the three nations without individual export licenses. Quantum technologies covered by ITAR fall within scope. An Excluded Technology List identifies articles not eligible for the exemption and will be reviewed annually.

Why it matters. These reforms represent the most substantial relaxation of allied defense trade barriers in decades. For quantum technology firms and research institutions operating across AUKUS jurisdictions, the practical effect is a marked reduction in licensing friction for defense-related quantum articles, services, and technical data. The UK government estimated the changes would support up to £500 million in annual UK defense exports. The reforms also create a two-tier system: AUKUS partners enjoy streamlined transfer, while all other countries remain subject to full licensing requirements. This will shape where quantum defense R&D collaborations form and where they do not.

What remains unclear. What quantum-specific items, if any, appear on the Excluded Technology List. How quickly the AUKUS Authorized Users enrollment process will scale beyond established defense primes to include smaller quantum technology firms and university labs. Whether the annual review mechanism for the excluded list will keep pace with the speed of quantum technology development.

Who should care. Defense contractors and quantum technology companies operating across Australia, the UK, and the United States. University research groups with AUKUS-funded quantum programs. Export control compliance officers. Non-AUKUS allied governments (Canada, Japan, the Netherlands) watching whether similar arrangements may follow.

Turkey: Defense Industry Committee Approves Quantum Technologies Development Centre

What happened. On August 6, 2024, Turkey’s Defense Industry Executive Committee (SSİK) approved the establishment of a Quantum Technologies Development Centre, the first of its kind in the country. The centre’s stated objectives include building a domestic innovation ecosystem, cultivating skilled human resources, and advancing capabilities in quantum communication, encryption, detection, and computing. The approval came at the same session that greenlit the Steel Dome integrated air defense project. Several defense-sector quantum projects were already underway, including ASELSAN’s work on quantum LIDAR and quantum radar systems in collaboration with Turkish universities.

Why it matters. Turkey is one of a growing number of NATO members establishing dedicated quantum infrastructure, but its approach is distinctive in placing quantum technology development squarely within the defense industrial base from the outset. Rather than beginning with a civilian national quantum strategy (as most European and Asian governments have done), Turkey is routing its quantum investment through SSİK, the same body that oversees major weapons programs. This signals that Ankara views quantum technology primarily through a defense and national security lens, with civilian applications as secondary.

What remains unclear. The centre’s budget, timeline, and institutional home (whether it will sit within an existing defense agency such as ASELSAN or operate independently). Whether Turkey plans to release a broader national quantum strategy that extends beyond defense applications. How the centre will interact with NATO’s own emerging work on quantum technology standards and interoperability.

Who should care. NATO defense planners tracking allied quantum capabilities. Turkish defense industry suppliers and university research groups. Governments monitoring quantum technology proliferation among NATO members.

United States: White House Publishes Strategy for International Quantum Cooperation

What happened. On August 12, 2024, the White House OSTP published “Advancing International Cooperation in Quantum Information Science and Technology,” a report prepared by the NSTC Subcommittee on Quantum Information Science. The report made three recommendations: the U.S. government should create dedicated long-term funding mechanisms for international QIST collaboration; agencies should enhance interagency coordination of international engagements; and the government should establish metrics to measure global competitiveness in QIST.

Why it matters. The report is notable for what it warns against as much as what it recommends. It explicitly cautions that governments worldwide may “move to preemptively inhibit cooperation, even for early-stage research, to retain a perceived strategic advantage,” and that such actions could “stunt the growth of the field.” This is a direct acknowledgment, from the U.S. science policy establishment, of the tension between the expanding quantum export control regimes (which the U.S. itself tightened in 2024) and the collaborative research environment that quantum science still requires. The report also highlights a structural problem: neither the State Department nor the National Quantum Coordination Office has a meaningful R&D budget to fund international collaborative activities, leaving a gap between policy intent and operational capacity.

What remains unclear. Whether Congress will appropriate dedicated funding for international QIST cooperation, given that the NQI Act’s original authorizations had already partially expired. How the report’s call for measured engagement will coexist with the simultaneous tightening of quantum export controls and outbound investment restrictions. What metrics the government will adopt to measure “global competitiveness” in a field where meaningful benchmarking remains difficult.

Who should care. U.S. research institutions with international quantum collaborations. Foreign governments and research agencies seeking cooperative arrangements with U.S. partners. Federal agencies managing quantum R&D portfolios with international dimensions. Congressional appropriators considering NQI reauthorization.

Also in August 2024

Singapore’s Quantum Engineering Programme launched the National Quantum Sensor Programme as part of the National Quantum Strategy announced in May 2024, focusing on position, navigation, and timing; biomedical sensing; and remote sensing, alongside a separate National Quantum Processor Initiative for trapped-ion and neutral-atom hardware.

Ghana’s Kwame Nkrumah University of Science and Technology launched the E-Learning African International School on Quantum Science and Technology (ELAIS-QST), a six-month online program for African students and professionals, marking one of the first structured quantum education initiatives on the continent.


Detailed cross-jurisdictional analysis of each development in this briefing, including sector-specific implications and regulatory timelines, is available to Quantum Policy Radar subscribers.

Share

Stay informed

Receive the Quantum Policy Radar Open Brief — a free selection of curated quantum policy intelligence.

We'll send you a confirmation email. No spam, unsubscribe anytime.