GSA begins quantum security efforts for digital and physical systems

The General Services Administration announced on Monday that it is leveraging two of its existing programs to support quantum-resilient cryptography migration efforts, following a June executive order on bolstering the government’s post-quantum security and subsequent memorandum.  

The first effort will be made through the Federal Identity, Credential and Access Management framework, a foundational architecture of federal identity systems. GSA said it will be updating this framework to include quantum-resilient algorithms that maintain compatibility with existing systems.

“This modernization ensures that agencies can transition smoothly to new security standards without disrupting daily operations,” GSA said in a press release.

The second update will occur within GSA's Federal Information Processing Standards 201 Evaluation Program, executed through the Physical Access Control System lab. Citing physical security as equally important to digital security, PACS will expand its testing capabilities to include evaluations of quantum-resilient solutions for federal building access points. Identity credentials like employee badges, visitor passes and building access codes will also receive PQC updates. 

“Transitioning to quantum-resistant security is a complex, multiyear process that requires careful coordination across government and a steady investment/funding strategy,” the press release reads. “GSA's early action helps mitigate risks and supports a secure, orderly migration that protects both digital systems and physical facilities.”