U.S. Treasury Launches Financial Sector Quantum-Readiness Task Force, With Digital Asset Risk Handled Separately

On August 24 local time, the U.S. Treasury launched a public-private "Quantum-Readiness Task Force" to prepare for the transition to Post-Quantum Cryptography (PQC). Its basis is Executive Order 14412, signed on June 22, and the roadmap for the financial sector's post-quantum cryptography transition released in January this year by the Group of Seven (G7) Cyber Expert Group. Post-quantum cryptography is cryptographic technology designed to remain difficult to break even if a sufficiently powerful quantum computer emerges, and it requires preparation to move existing systems and data onto new algorithms. The task force will operate through three working groups: sector alignment and transition, third-party and vendor readiness, and digital asset and emerging technology risk. Government agencies, financial firms, financial market infrastructures and technology providers will participate. The Treasury set out its lines of activity as identifying critical dependencies, improving "cryptographic agility" that makes it easier to change algorithms when needed, promoting interoperability, strengthening operational resilience and resolving implementation challenges. The digital asset working group will address the risks of digital assets and emerging technologies, and independent reporting pointed to the fact that blockchain networks make wide use of elliptic curve cryptography for transaction signing and wallet security as a key part of the background to this working group. Executive Order 14412 directed the U.S. Office of Management and Budget (OMB) to issue guidance requiring federal agencies, excluding national security systems, to transition high-value asset and high-impact systems to post-quantum cryptography by December 31, 2030 for cryptographic key establishment and by December 31, 2031 for digital signatures. This task force announcement, however, did not include a separate mandatory transition deadline applying to private financial firms generally, the algorithms to be adopted, or a schedule for the release of initial guidance. The measure is a launch stage in which the government and industry build a common implementation path and set of priorities, rather than a finalization of regulation.