The Quantum Trade Isn't About Quantum Computers

On Monday, September 21, the National Institute of Standards and Technology will quietly move every remaining FIPS 140-2 certificate to "Historical" status. No press conference, no market coverage. But from that day forward, thousands of encryption products — the hardware security modules, VPN appliances, and cryptographic libraries that federal agencies are required to buy — lose their eligibility for new U.S. government procurement unless they have been revalidated under the successor standard, FIPS 140-3.

It is a bureaucratic milestone with a much larger meaning: the post-quantum migration now has enforcement dates. The rebuild of the internet's cryptographic foundations has stopped being a research topic and become a compliance calendar. And compliance calendars, unlike science, move money on schedule.

The Deadline Cascade

The threat itself is familiar by now. A sufficiently powerful quantum computer running Shor's algorithm would break RSA and elliptic-curve cryptography — the public-key systems that secure essentially all encrypted internet traffic, every online payment, every software update, and every classified network. Nobody has built one. The disagreement is about when someone will, with estimates running from 2029 to the 2040s.

Washington stopped waiting for consensus. NIST finalized its first three post-quantum cryptography (PQC) standards in August 2024 — ML-KEM for key exchange, ML-DSA for digital signatures, and SLH-DSA as a hash-based backup — ending an eight-year global competition. Since then, the deadlines have stacked up into a cascade:

• September 21, 2026: FIPS 140-2 certificates move to Historical status. New federal procurement requires FIPS 140-3 validation — the certification gateway through which PQC-capable modules will flow.
• January 1, 2027: Under the NSA's CNSA 2.0 mandate, all new national security system acquisitions — VPNs, routers, operating systems, communications gear sold to defense agencies and contractors — must support quantum-resistant algorithms, including the highest-security ML-DSA-87 parameter set for signatures.
• 2030: NIST's transition guidance (IR 8547) deprecates RSA-2048 and ECC P-256. No new systems in federal or regulated environments may deploy them.
• 2035: Quantum-vulnerable algorithms are prohibited entirely from NIST standards — RSA at any key length, ECDH, ECDSA, all of it.

Then, in March 2026, Google shortened the practical timeline. Citing progress in quantum error correction and falling resource estimates for factoring RSA-2048, its security team warned that a cryptographically relevant quantum computer could arrive as early as 2029 — and that organizations with long-lived sensitive data should complete migration of their most critical systems within three years. Google would know something about migration timelines: it started building "crypto agility" into its own infrastructure in 2016. That is a decade of runway, consumed by one of the most technically sophisticated organizations on earth.

The Theft Already Happened

The reason the deadlines precede the machine is a strategy called harvest now, decrypt later. Intelligence agencies do not need a quantum computer to begin the attack — they need storage. Intercept encrypted traffic today, archive it, and decrypt it whenever the hardware arrives. CISA, the NSA, and the UK's National Cyber Security Centre have all formally confirmed that nation-state actors are conducting this bulk collection now, and have been for years.

That inverts the usual security math. For any data that must stay confidential for a decade or more — diplomatic cables, weapons designs, M&A files, health records, banking archives — the breach window is already open. It closed retroactively the moment the traffic was captured. Every quarter of delay adds another quarter of stored ciphertext to the future decryption queue. This is why Google's 2029 date matters more than the date a quantum computer actually ships: the deadline is set by the lifetime of your secrets, not the lab schedule of the adversary.

Briefings like this land in members' inboxes before the market prices them in. Join free →

A Migration Running at Two Speeds

Here is the strange part: the consumer internet is already substantially protected. When Chrome and Firefox switched on hybrid post-quantum key exchange by default, adoption happened silently, in browser updates nobody read the release notes for. By late 2025, Cloudflare reported that more than half of human-initiated web traffic on its network already used post-quantum encryption. The public internet crossed the halfway mark without anyone noticing.

Enterprises are the opposite story. Industry surveys put the share of organizations with PQC actually deployed in production at roughly 13%, with a majority yet to begin meaningful migration at all. The gap is structural: a browser vendor can flip one protocol; a bank has to find every place cryptography lives first — in mainframes, payment rails, vendor integrations, embedded devices, and code nobody has touched since the 1990s. Most large organizations cannot produce a complete inventory of their own cryptography, let alone replace it. Estimates for a full enterprise transition run eight to fifteen years. The organizations that started latest have the longest road and the shortest calendar.

Which sets up the investment question this deadline cascade forces: a mandatory, multi-year infrastructure replacement cycle — with fixed federal enforcement dates, active nation-state pressure, and four-fifths of the enterprise world not yet started — is about to be paid for. The money gets spent whether a quantum computer ever factors a single RSA key or not. The question is who invoices it.

Get the next briefing free in your inbox: Join AlphaBriefing

The rest of this briefing is for paid members: the four layers of the post-quantum spend and the listed companies positioned in each, the federal dollar figure that sets the floor on this market, the popular "quantum stocks" that are the wrong vehicle for this specific trade, and the catalyst calendar through January 2027.

AlphaBriefing Paid gets you every investment thesis, scenario framework, and catalyst brief we publish — the analysis private intel clients pay four figures for, at a fraction of that.

Unlock the full briefing →