Technology hub: Quantum-safe security (post-quantum cryptography)
Classical cryptography designed to resist attacks by future quantum computers, and the migration of products and organisations to it. A related area, not a quantum technology: it runs on ordinary computers.
A related area, not a quantum technology: it is listed with the pillars because the same people and organisations work on it.
- Technology families
- Related codes
- EuroSciVoc: cryptography (broader match)
238 confirmed items. Including suggestions by rules or AI, not yet reviewed: 361. Suggestions are counted, not listed.
At a glance
- EU and national projects: 139
- Organisations and companies: 45
- Infrastructure and deployment status: 1
- Standards and post-quantum products: 50
- Quantum software: 2
- Jobs and funding calls: 1
Key items: EU and national projects
- ORQESTRA: Orchestrating the Operational Deployment of Quantum Resistant Services for Next-Generation Secure Defence Systems and Communications
- PQ-TLS: Post-quantum padlock for web browser
- XTRUST-6G: Extended zero-trust and intelligent security for resilient and quantum-safe 6G networks and services
Key items: Organisations and companies
Explore by function, platform and application
Draft — to be completed by the responsible team. Draft: to be completed by the responsible team. Starter values from the existing post-quantum families; a related area, not a quantum technology.
- Function
- Algorithms and standards; Products; Migration
- Algorithm family
- No starter values yet.
Expert review sheet of the faceted taxonomy (every value, definition and source)
Overview
The technology atlas of Quantum-safe security (post-quantum cryptography): its value chain, the documented actors by role, facilities, funding, patents and publications, standards and policy measures on one page, each from a source the portal already publishes. Each section says whether these sources document the technology, show an evidence gap or hold nothing about it.
| Section | State in these sources | Records |
|---|---|---|
| Value chain | No evidence found in these sources | 0 |
| Actors by role | Documented in these sources | 45 |
| Facilities and access | No evidence found in these sources | 0 |
| Funding | Documented in these sources | 1 |
| Patents and publications | No evidence found in these sources | 0 |
| Standards | Documented in these sources | 37 |
| Policy measures | No evidence found in these sources | 0 |
| Evidence gaps | No evidence found in these sources | 0 |
- Documented in these sources: at least one record of these sources is about this technology.
- Evidence gap in these sources: the parts tree names a stage, but no documented European actor is linked to it here. Evidence gap in these sources, not a finding of dependency.
- No evidence found in these sources: No evidence found in these sources. It means only that these sources hold nothing on it.
Public layer: structure and documented actors only. Actor roles come from typed, dated relationships and are never inferred from shared projects or patents. Supplier assessments of the restricted dependency map are not shown on this public page. No technology readiness level is given.
External context: EPO Observatory: quantum technologies · EPO Deep Tech Finder
Value chain
The stages of this technology in the parts tree, a reference structure from review articles and EU law, with the European companies whose own product page names a product line for the stage or a part under it (the curated supplier directory).
No evidence found in these sources. The parts tree has no platform or part for this technology.
Actors by role
Organisations with a documented relationship to this technology: a product line on the company’s own product page, the host or programme the infrastructure catalogue names for a facility, or the operator of an access route. Each row names its source and the date it was read. Roles are never inferred from taking part in the same project or patent.
| Role | Actors | State | Where |
|---|---|---|---|
| Manufacturer or supplier of a part | 0 | No evidence found in these sources | 0 organisations in the table below. |
| Host, operator or access provider | 0 | No evidence found in these sources | 0 organisations in the table below. |
| Funder or programme | 0 | No evidence found in these sources | 0 organisations in the table below. |
| Researcher or developer | 45 | Documented in these sources | Organisations confirmed under this technology by the classification; listed in “Organisations and companies” below. Participants in EU-funded projects are counted per pillar in technology intelligence. |
| User | 0 | No evidence found in these sources | These sources record no user of this technology. |
No evidence found in these sources. No product line, facility host, programme or access route is recorded for this technology.
Organisations and companies
45 confirmed items. Including suggestions by rules or AI, not yet reviewed and not listed here: 152.
- Stichting Nederlandse Wetenschappelijk Onderzoek Instituten
- Universita degli Studi di Padova
- Universite de Geneve
- Universidad Politecnica de Madrid
- Universite du Luxembourg
See all 45: Organisations and companies · Companies of Quantum-safe security (post-quantum cryptography) in the investor screener
Facilities and access
Facilities of this technology in the infrastructure catalogue, the furthest milestone the deployment tracker evidences for each, and the current access routes that open them.
No evidence found in these sources. The infrastructure catalogue lists no facility for this technology.
Infrastructure and deployment status
1 confirmed item.
Funding
Upcoming work-programme topics in this technology (the EU programme pipeline) and the funding instruments whose stated quantum relevance names it. The awards of its EU-funded projects and the announced funding rounds follow below.
Upcoming topics in the programme pipeline
Documented in these sources: 1 upcoming topic (pipeline read 2026-11-01).
- Secure PQC implementations, Cryptanalysis and Post-quantum Digital Trust
Pipeline topics of Quantum-safe security (post-quantum cryptography)
Funding instruments
No evidence found in these sources. No funding instrument of the registry names this technology in its quantum relevance.
6 more instruments are open to any field of research and are not listed here.
EU and national projects
139 confirmed items. Including suggestions by rules or AI, not yet reviewed and not listed here: 142.
| Measure | Total | Projects with an amount | Projects without one |
|---|---|---|---|
| EU contribution (maximum grant agreed) | EUR 104,218,442.10 | 32 | 0 |
| Total cost (includes the award) | EUR 110,080,786.91 | 25 | 0 |
| Measure | Total | Projects with an amount | Projects without one |
|---|---|---|---|
| award value (Gateway to Research) | GBP 12,992,889 | 23 | 0 |
| NWO award amount | EUR 8,398,510 | 9 | 0 |
| ANR aid allocated | EUR 2,611,936.07 | 5 | 0 |
| funded amount | EUR 585,616.50 | 3 | 0 |
| funded amount | SEK 10,610,000 | 3 | 0 |
| total eligible expenditure | EUR 1,991,587.07 | 3 | 0 |
| aid allocated (France 2030, operated by the ANR) | EUR 8,336,314 | 1 | 0 |
| approved FWF funding | EUR 218,550 | 1 | 0 |
| NWO award amount | 0 | 0 | 1 |
| approved total costs | 0 | 0 | 13 |
| award value (Gateway to Research) | 0 | 0 | 24 |
| current total commitment | 0 | 0 | 1 |
| funded amount | 0 | 0 | 14 |
| total awarded | 0 | 0 | 4 |
Each project counts once. A total adds the amount each source states for its projects within one measure and one currency only: EU contributions, national awards and other measures are never added together. Total cost includes the award and is shown separately. A country filter keeps whole projects with a participant in the country, so its total is not the country's share. Programme envelopes, partner shares, co-funding and payments are separate layers and are never added to awards; payments are not published by the sources used. Outputs are linked only through an explicit project or grant identifier or reviewed documentary evidence, never by name alone; only a reviewed document can show a demonstrated contribution. CORDIS and Funding & Tenders amounts are one measure, the EU contribution (maximum grant agreed in the grant agreement, not payments). Country codes EL and UK are read as GR (Greece) and GB (United Kingdom). National and regional rows whose title names no quantum technology are left out unless asked for. EU and national totals are shown apart and never added.
Includes projects from the ANR open data: ANR, data.gouv.fr, ODbL 1.0; those rows are shared alike under the Open Database Licence.
2 confirmed project pages have no award record and are not in the totals.
- ORQESTRA: Orchestrating the Operational Deployment of Quantum Resistant Services for Next-Generation Secure Defence Systems and Communications
- PQ-TLS: Post-quantum padlock for web browser
- XTRUST-6G: Extended zero-trust and intelligent security for resilient and quantum-safe 6G networks and services
- PiQASO: Post-Quantum Cryptography As-a-Service for Common Transmission Systems and Infrastructures
- FOCAL: Functional cOmposition of post quantum Cryptosystems At Large
Jobs and funding calls
1 confirmed item.
Patents and publications
Patent counts come from EPO Open Patent Services in technology intelligence, by CPC group, and per EPO quantum concept in the technology intelligence reports; publications by OpenAlex topic. The patent series of this node and its documents follow below.
No evidence found in these sources. No patent series, concept report or OpenAlex topic names this technology.
Patents
No patent series for this node. No CPC group names this technology, so no patent series is drawn for it.
Standards
Standards, specifications, committees and roadmaps of the standards tracker in the scope of this technology, each with its body and status.
Documented in these sources: 37 tracked items.
| Identifier | Title | Kind | Status |
|---|---|---|---|
| ETSI TS 103 744 | Cyber Security (CYBER); Quantum-Safe Cryptography (QSC); Quantum-safe Hybrid Key Establishment | Specification | Published |
| ETSI TR 103 619 | Cyber Security (CYBER); Quantum-Safe Cryptography (QSC); Migration strategies and recommendations to Quantum Safe schemes | Technical report | Published |
| ETSI TR 104 016 | Cyber Security (CYBER); Quantum-Safe Cryptography (QSC); A Repeatable Framework for Quantum-Safe Migrations | Technical report | Published |
| ETSI TS 104 015 | Cyber Security (CYBER); Quantum-Safe Cryptography (QSC); Efficient Quantum-Safe Hybrid Key Exchanges with Hidden Access Policies | Specification | Published |
| IEEE P3172 | Recommended Practice for Post-Quantum Cryptography Migration | Work item or project | Withdrawn |
| IEEE P1943 | Standard for Post-Quantum Network Security | Work item or project | In development |
| IEEE P1947 | Standard for Quantum Cybersecurity Framework | Work item or project | In development |
| FIPS 203 | Module-Lattice-Based Key-Encapsulation Mechanism Standard | Standard | Published |
| FIPS 204 | Module-Lattice-Based Digital Signature Standard | Standard | Published |
| FIPS 205 | Stateless Hash-Based Digital Signature Standard | Standard | Published |
| FIPS 206 (FN-DSA) | FN-DSA (based on FALCON) | Specification | In development |
| HQC (planned FIPS) | HQC selected for standardization (NIST IR 8545 rationale) | Work item or project | In development |
| NIST SP 800-227 | Recommendations for Key-Encapsulation Mechanisms | Guideline | Published |
| NIST IR 8547 ipd | Transition to Post-Quantum Cryptography Standards | Migration deadlines | Draft |
| NIST IR 8610 | Status Report on the Second Round of the Additional Digital Signature Schemes for the NIST Post-Quantum Cryptography Standardization Process | Technical report | Published |
| RFC 10024 | Post-Quantum Traditional (PQ/T) Hybrid Key Agreement Mechanisms for TLS 1.3 | Standard | Published |
| draft-ietf-tls-mlkem-11 | ML-KEM Post-Quantum Key Agreement for TLS 1.3 | Specification | In development |
| RFC 9881 | Internet X.509 Public Key Infrastructure -- Algorithm Identifiers for the Module-Lattice-Based Digital Signature Algorithm (ML-DSA) | Standard | Published |
| RFC 9935 | Internet X.509 Public Key Infrastructure - Algorithm Identifiers for the Module-Lattice-Based Key-Encapsulation Mechanism (ML-KEM) | Standard | Published |
| RFC 9936 | Use of ML-KEM in the Cryptographic Message Syntax (CMS) | Standard | Published |
| draft-ietf-lamps-pq-composite-sigs-19 | Composite Module-Lattice-Based Digital Signature Algorithm (ML-DSA) for use in X.509 Public Key Infrastructure | Specification | In development |
| RFC 9980 | Post-Quantum Cryptography in OpenPGP | Standard | Published |
| EU PQC Coordinated Implementation Roadmap (Part 1) | A Coordinated Implementation Roadmap for the Transition to Post-Quantum Cryptography | Roadmap | Published |
| Commission Recommendation (EU) 2024/1101 | Commission Recommendation (EU) 2024/1101 of 11 April 2024 on a Coordinated Implementation Roadmap for the transition to Post-Quantum Cryptography | Recommendation | Active |
| ECCG Agreed Cryptographic Mechanisms v2 | ECCG Agreed Cryptographic Mechanisms - version 2 (EUCC Guidelines on Cryptography) | Guideline | Active |
| ECCG Agreed Cryptographic Mechanisms v3 (draft) | ECCG Agreed Cryptographic Mechanisms - version 3 - draft for public review | Specification | Draft |
| ANSSI PQC page and PQC FAQ (cyber.gouv.fr) | Cryptographie post-quantique (PQC) / FaQ sur la Cryptographie post-quantique (PQC) | Migration deadlines | Active |
| ANSSI-PG-083 v3.00 | Règles et recommandations concernant le choix et le dimensionnement des mécanismes cryptographiques | Migration deadlines | Published |
| ANSSI PQC position paper (2022) and follow-up (2023) | ANSSI views on the Post-Quantum Cryptography transition / Avis de l'ANSSI sur la migration vers la cryptographie post-quantique (suivi 2023) | Migration deadlines | Published |
| Leitlinie zur Umstellung auf PQC (BMI/BMDS/BSI, Artikelnummer BMI26024) | Nationale Umsetzung der EU-Roadmap zur Umstellung auf Post-Quanten-Kryptografie | Migration deadlines | Published |
| BSI TR-02102-1 Version 2026-01 | Kryptographische Verfahren: Empfehlungen und Schlüssellängen | Migration deadlines | Published |
| BSI VS-IT PQC transition deadlines | VS-IT: Umstellungsfristen für Post-Quanten-Kryptografie vereinbart | Migration deadlines | Active |
| Rijksbrede Quantumstrategie (2026), PQC-migratie tijdpad | Rijksbrede Quantumstrategie: Kansen benutten, belangen beschermen, integraal verbinden | Migration deadlines | Published |
| NCSC guidance: PQC migration timelines | Timelines for migration to post-quantum cryptography | Migration deadlines | Published |
| ITSM.40.001 | Roadmap for the migration to post-quantum cryptography for the Government of Canada (ITSM.40.001) | Migration deadlines | Published |
| TBS Security Policy Implementation Notice (SPIN) on PQC migration | Migrating the Government of Canada to Post-Quantum Cryptography: Security Policy Implementation Notice | Migration deadlines | Active |
| CNSA 2.0 | Announcing the Commercial National Security Algorithm Suite 2.0 | Migration deadlines | Active |
9 tracked items are about quantum technologies in general.
Standards and post-quantum products
50 confirmed items.
- Cryptographic Mechanisms: Recommendations and Key Lengths
- CYBER; Quantum-Safe Cryptography (QSC); Quantum-safe Hybrid Key Establishment
- A Coordinated Implementation Roadmap for the Transition to Post-Quantum Cryptography
- Commission Recommendation on a Coordinated Implementation Roadmap for the transition to Post-Quantum Cryptography
- Post-Quantum Traditional (PQ/T) Hybrid Key Agreement Mechanisms for TLS 1.3
See all 50: Standards and post-quantum products · Standards and PQC guidance
Policy measures
Actions of the Quantum Europe Strategy (COM(2025) 363) that name this technology or its pillar, or that link one of its facilities, with their status in the strategy tracker.
No evidence found in these sources. No action of the strategy tracker is tagged to this technology.
Evidence gaps
Stages of the value chain for which these sources link no documented European actor. Evidence gap in these sources, not a finding of dependency. A company may well supply the stage without a product page the directory has read; a missing record is never proof of a strategic dependency.
No evidence found in these sources. No value chain is recorded for this technology, so no gap can be named.
Quantum software
2 confirmed items.
JRC and EU analysis
Reports and pages of the European Commission’s Joint Research Centre (JRC). Identifiers are those of the JRC Publications Repository; the portal does not reproduce their data.
- Future Directions for Quantum Technology in Europe
Background analysis for the Quantum Europe Strategy: companies, patents, publications, supply chains, public funding and venture capital, by sector (communication including QKD, computing including simulation, sensing, and post-quantum cryptography).
- Post-Quantum Cryptography, the Journey so far and the Challenges Ahead
The threat quantum computers pose to current cryptography, the state of post-quantum cryptography and the challenges of migration.
Further reading
- Understanding Quantum Technologies 2025 (Olivier Ezratty, 8th edition, version 8.1 of 30 October 2025, arXiv:2111.15352 (v6), doi:10.48550/arXiv.2111.15352, CC BY-NC-ND 4.0)See Part 4: Communications and sensing
- Understanding Quantum Technologies 2026 (Olivier Ezratty, 9th edition, version 9.0 of 17 October 2026 (latest edition))See Part 4: Communications and sensing
Olivier Ezratty, Understanding Quantum Technologies (CC BY-NC-ND 4.0). Links only; no text of the book is reproduced on this portal.
All technologies · How items are classified · Published classification method · Draft SRIA 2026 chapter: Standardisation