Cybersecurity and Infrastructure Security Agency logo. CISA posted a new resource to guide PQC adoption
The Cybersecurity and Infrastructure Security Agency collaborated with the National Security Agency to produce a list of software and hardware that currently supports or are expected to support post-quantum cryptography standards.
//

CISA Identifies Technologies Ready for PQC Transition in Product Categories List

3 mins read

The Cybersecurity and Infrastructure Security Agency has released a new resource to guide the development of post-quantum cryptography, or PQC, adoption strategies across government and industry.

The Product Categories for Technologies That Use Post-Quantum Cryptography Standards list identifies hardware and software categories that currently support or are likely to support PQC standards, CISA said Friday.

CISA developed the product categories list with the National Security Agency in compliance with the executive order President Donald Trump signed in June 2025 directing the Department of Homeland Security to publish guidance on PQC-ready technologies. 

“The advent of quantum computing poses a real and urgent threat to the confidentiality, integrity, and accessibility of sensitive data — especially systems that rely on public-key cryptography,” acting CISA Director Madhu Gottumukkala stated. “To stay ahead of these emerging risks, organizations must prioritize the procurement of PQC-capable technologies. This product categories list will support organizations making that critical transition.”

CISA Identifies Technologies Ready for PQC Transition in Product Categories List

Find out how to address rising cyberthreats from quantum computing and other emerging technologies at the Potomac Officers Club’s 2026 Cyber Summit on May 21. The critical GovCon conference will feature leaders from government and industry to discuss ongoing and future cyber initiatives across defense and civilian agencies. Get your tickets here.

Which Technologies Are Included in the PQC Categories?

The initial list focuses on cloud services, web software, networking hardware and software, and endpoint security products. Each of the technology mentioned apply PQC standards to foundational cryptographic functions, including key establishment for secure communications and digital signatures to verify authenticity and data integrity.

CISA said the list will be updated regularly to reflect the evolving cybersecurity landscape and emerging technologies.

How Is the US Government Advancing Post-Quantum Cryptography?

Beyond CISA’s guidance, the federal government is taking concrete steps to accelerate PQC adoption across national security systems. In December, the Department of War directed all Pentagon components to transition rapidly to PQC in response to advances in quantum information science.

In a memo issued by Katie Arrington—who was then performing the duties of the Pentagon chief information officer and is a past Wash100 winner—senior leaders were instructed to inventory all cryptography currently in use and designate component-level PQC migration leads.

On Capitol Hill, lawmakers introduced a bipartisan bill that would reauthorize the National Quantum Initiative, extending funding for federal quantum research and development programs.