All Quantum Policy & Sovereignty Posts

  • CNSA 2.0 CNSA 2.0 NSA Post-Quantum PQC

    CNSA 2.0: The Complete Guide to NSA’s Post-Quantum Requirements

    The definitive vendor-neutral reference to NSA's Commercial National Security Algorithm Suite 2.0 — the most operationally specific post-quantum cryptography mandate in the world. This guide breaks down every component of CNSA 2.0 in one place: the complete algorithm suite with NIST standard names and FIPS references (ML-KEM-1024, ML-DSA-87, AES-256, SHA-384/512, LMS, XMSS), why NSA mandates only the highest parameter levels, the full category-by-category transition timeline…

    Read More »
  • The Quantum Utility Map Quantum Utility Quantum Sovereignty

    Quantum Sovereignty and the Utility Trap

    The industries where quantum computing creates the most value are the industries most critical to national security. The hardware serving them is concentrated in a handful of companies and countries. The architectural decisions determining whether access is sovereign or dependent are being made now. This article explains the trap and how to avoid it

    Read More »
  • China's Quantum Ambition China Quantum Supply Chain

    China’s Quantum Supply Chain: How Export Controls Are Building What They Sought to Prevent

    In June 2023, a Zhejiang University graduate named Chen Jie sat for an interview with a Chinese tech columnist. Chen had founded a cryogenics company called CSSC Pengli in Nanjing thirteen years earlier — a subsidiary of China State Shipbuilding Corporation that made cooling systems for MRI machines. Nobody in the West had heard of him. His company had just been placed on the US…

    Read More »
  • China's Quantum Ambition China Technology Leapfrog Doctrine

    The Leapfrog Doctrine: How China Systematically Conquered Every Technology It Targeted

    Almost fifteen years ago, I stood on the mezzanine floor of a manufacturing facility in Dongguan, staring into the dark. Literally. Below me, a sprawling production line hummed with the rhythmic, pneumatic hiss of assembly arms and the whine of servos. There were no overhead lights. There were no workers on the line. There was only the glow of status LEDs blinking in the gloom,…

    Read More »
  • Quantum Sovereignty Quantum Sovereignty Deep Dive

    Quantum Sovereignty & Geopolitics

    Quantum technologies are leaving the lab and entering the machinery of national power — and "quantum sovereignty" is becoming a blunt strategic question: who can build, operate, trust, and control quantum capabilities under geopolitical stress, without being cut off? This article is the roadmap for the Quantum Sovereignty & Geopolitics series, which treats sovereignty as more than a slogan. Starting with a primer on the…

    Read More »
  • Quantum Sovereignty Quantum Sovereignty Quantum Systems Integration

    Quantum Sovereignty in Practice: When Geopolitics Becomes Architecture

    At its core, quantum sovereignty means having full control over the critical layers of quantum technology domestically - the ability to design, manufacture, and operate quantum systems without external dependency. In practice, this implies a country could build a complete full-stack quantum ecosystem entirely within its national borders: from quantum chips and cryogenic hardware to software, algorithms, and encryption protocols. The allure of this vision…

    Read More »
  • Quantum Policies EU PQC NIS2 DORA

    NIS2, DORA, and the EU Post-Quantum Roadmap

    If you are a CISO under NIS2 or DORA, you are already expected to run a risk-management system that tracks material, evolving threats - and to implement “state‑of‑the‑art” controls appropriate to the risk. The EU’s PQC roadmap is effectively saying: quantum is now one of those evolving threats you must govern.  The most important conceptual shift for leadership teams is this: the EU is not (yet)…

    Read More »
  • Quantum Policies US PQC Regulatory Framework.

    The Complete US Post-Quantum Cryptography (PQC) Regulatory Framework in 2026

    Three pillars anchor the US PQC framework: the Quantum Computing Cybersecurity Preparedness Act (federal law that no executive order can undo), NSM-10's 2035 migration target (still in force), and NIST's finalized FIPS standards (published August 2024). The Trump administration's June 2025 executive order streamlined, rather than eliminated, PQC obligations, removing prescriptive procurement mandates while retaining the CISA product category list and a TLS 1.3 deadline…

    Read More »