Separate the technologies before setting the roadmap
Quantum computing promises advantages for particular classes of calculation, rather than a general speedup for every application. Error correction, reliable operations, scale and the cost of the complete workflow determine whether a theoretical advantage becomes useful. Logistics optimization and materials simulation deserve investigation, but operational plans should not depend on an unproven advantage.
DARPA's Quantum Benchmarking Initiative is assessing whether an industrially useful quantum computer can be built by 2033, with utility defined in relation to computational value and cost. Its verification effort provides a better planning reference than a universal arrival date. A participant's advancement through evaluation is not proof that every proposed application is ready.
For a computing pilot, compare the proposed workflow against the best practical classical alternative. Include data preparation, error correction, repeated runs, classical post-processing and access costs. The relevant result is useful output at acceptable accuracy, time and expense—not qubit count alone.
Cryptographic migration has an immediate purpose
A sufficiently capable quantum computer could threaten widely used public-key systems such as RSA and elliptic-curve cryptography. This does not mean every military communication uses those algorithms or that every encryption primitive fails in the same way. The first task is to identify what each system actually uses.
NIST explains the harvest-now, decrypt-later risk: encrypted information retained today could remain valuable when future cryptanalysis becomes possible. Long confidentiality periods and long replacement cycles can justify action before a cryptographically relevant machine exists.
NIST's first three PQC standards, finalized in August 2024, serve different purposes:
- FIPS 203, ML-KEM: establishes shared key material.
- FIPS 204, ML-DSA: provides digital signatures.
- FIPS 205, SLH-DSA: provides a different digital-signature approach.
Selecting an algorithm is only part of migration. Libraries, protocols, certificates, signing infrastructure, hardware support and counterpart systems have to work together. Larger messages or different processing demands can affect constrained terminals and long-lived equipment. Test those effects before deployment.
Use the applicable national security schedule
September 2026 review update: NSA's post-quantum resources point to CNSS Policy 15, released March 4, 2025, and the CNSA 2.0 FAQ. The December 2024 FAQ states expectations for new deployments from January 1, 2027 and equipment transition by December 31, 2030, with applicable profile qualifications. Owners should use the current policy and product-specific guidance rather than an older general timeline extending through 2033.
- Inventory cryptographic uses, dependencies, owners and data protection lifetimes.
- Identify the governing requirements and the supplier's supported migration path.
- Prioritize systems with long confidentiality needs or difficult hardware replacement.
- Test interoperability, performance, recovery and certificate or signing changes.
- Maintain cryptographic agility so later approved changes do not require another complete redesign.
Satellites, weapons systems and infrastructure deserve particular attention to upgrade access and lifecycle constraints. A software update may be sufficient in one product and impossible in another. The plan needs to account for both.
Sensing, QKD and classical algorithms need separate decisions
Quantum sensing is its own technical field. Atomic clocks, magnetometers and gravimeters can support timing, navigation and measurement applications, but performance depends on the instrument and environment. The UK government's May 2024 flight-trial announcement illustrates progress in navigation-related quantum technology. A successful trial does not establish a deployable solution for every GPS-denied mission or prove practical submarine detection.
Quantum key distribution also differs from post-quantum cryptography. It requires specialized physical infrastructure and does not independently solve source authentication, endpoint security or availability. NSA does not recommend QKD for national security systems unless its stated limitations are overcome. It should not be treated as the default alternative to approved PQC migration.
Quantum-inspired methods run on classical hardware. Tensor-network techniques and optimization approaches associated with quantum research are candidates for experimentation, not automatic improvements over established solvers. For route planning, logistics or resource allocation, test realistic constraints and compare solution quality, runtime and maintainability.
The strongest near-term investment is in capabilities that remain useful under several possible technology timelines: cryptographic agility, credible benchmarks, adaptable sensor interfaces and a disciplined way to evaluate new methods.
Sources and further reading
- DARPA Quantum Benchmarking Initiative
- NIST explanation of PQC and retained-data risk
- NIST’s first three finalized standards
- NSA current resource page
- CNSA 2.0 FAQ, December 2024 version
- NSA QKD assessment
- UK quantum navigation flight trials
Spartan X’s cybersecurity and engineering practices turn that approach into practical inventories, integration plans and performance assessments, helping defense organizations prepare for quantum risk while making disciplined technology investments.
