GSA Updates Identity, Access Programs for Post-Quantum Migration

The General Services Administration (GSA) said on Aug. 24 that it is updating and expanding two existing federal programs to support the government-wide migration to post-quantum cryptography (PQC). The action follows a June executive order and Office of Management and Budget (OMB) memorandum directing agencies to accelerate the transition to quantum-resistant security.

In a blog post, GSA said it is updating the Federal Identity, Credential, and Access Management (FICAM) architecture to support quantum-resistant algorithms.

The FICAM modernization effort will emphasize “crypto agility,” which GSA described as the ability to quickly shift between cryptographic methods as threats and security standards change.

GSA is also expanding the testing capabilities of the Federal Information Processing Standards (FIPS) 201 Evaluation Program, executed through the Physical Access Control System (PACS) lab, to evaluate quantum-resistant solutions for federal buildings.

“This ensures that employee badges, visitor passes, and building access controls will remain secure against future quantum threats,” GSA said.

“The enhanced lab infrastructure represents an entirely new capability, requiring extensive research and development to test quantum-resistant technology for both physical access control systems and employee identification cards,” it added.