US government websites lag in post-quantum cryptography adoption at 42.7%, F5 finds
FFIV•F5 research found post-quantum cryptography adoption at 42.7% among US government websites, falling to 23.1% when default protections from content delivery networks and cloud providers are excluded. The report said two-thirds of organizations assessed quantum risks, but only 27% are starting to act.
1. Adoption and deadlines
F5’s 2026 State of Application Strategy Report found US government websites lag nearly every other industry in post-quantum cryptography adoption. Federal civilian agencies face a December 31, 2030, compliance deadline, while national security systems face an initial procurement gate on January 1, 2027; the report warned lengthy procurement cycles risk delaying protection against attacks that collect encrypted data for future decryption.
