NSA says quantum cryptography is too limited for US security

As of June 2026, the National Security Agency does not recommend using quantum key distribution and quantum cryptography to secure sensitive US systems unless significant limitations are overcome. Despite promises of unhackable communication based on the laws of physics, the agency cites a “low tolerance for error” as a critical weakness in these technologies. The most advanced applications of quantum cryptography, the NSA explains, are currently theoretical and rely on a future, fully-quantum network linking quantum computers and sensors. “Official websites use.gov,” the agency states, emphasizing the need for robust and practical security solutions.

NSA Finds QKD/QC Limited by Practical Technical Challenges

Practical implementation of quantum key distribution (QKD) and quantum cryptography (QC) is currently hindered by significant technical hurdles, limiting their immediate utility for securing sensitive data. While theoretical models promise unhackable communication, the agency emphasizes that the most robust applications of QC are presently theoretical, designed for integration within a fully-quantum network connecting quantum computers and quantum sensors.

The NSA’s assessment, released in June 2026, highlights that QKD faces a delicate balance between communication needs and security requirements, with a “low tolerance for error.” Technical limitations extend beyond error rates; the agency notes that QKD’s practical application is challenged by factors impacting real-world deployment. In contrast, quantum-resistant algorithms, implemented on existing platforms, offer a more readily available solution by using mathematical complexity to secure data. These algorithms provide confidentiality, integrity and authenticity even in the face of potential future quantum computing threats, and offer more cost-effective security services with a well-understood risk profile.

The agency’s current guidance does not recommend QKD or QC for National Security Systems unless these limitations are addressed, signaling a shift towards prioritizing algorithms with proven, near-term viability.

Stay current

See today’s quantum computing news on Quantum Zeitgeist for the latest breakthroughs in qubits, hardware, algorithms, and industry deals.

Avatar of Ivy Delaney

Ivy Delaney

Ivy Delaney has been working with neural networks and machine learning since the mid-nineties, back when a couple of hidden layers and a long afternoon of training counted as ambitious. She has watched the field go from academic curiosity to the thing quietly running underneath everything, and she brings that long view to quantum computing. For Quantum Zeitgeist she covers the ground where the two fields meet. That means quantum machine learning and the variational algorithms it leans on, and it also means the less glamorous but more interesting story of classical machine learning already doing real work inside quantum machines, decoding error-correcting codes, calibrating noisy hardware and learning the error models that simulators depend on. She writes about the hardware those algorithms have to run on too, and about the post-quantum cryptography scramble that the same hardware has set off. Her stories typically start with the paper, whether that is peer-reviewed work, conference proceedings or an arXiv preprint, with the source linked so you can hold a claim up against the research it came from. She is unimpressed by benchmarks that will not say what they beat, and by demonstrations that only work in the press release.

Latest Posts by Ivy Delaney: