Strengthening the EU transition to a quantum-safe world

CONTENTS I

FIGURES III

BOXES III

TABLE III

LIST OF ABBREVIATIONS IV

PREFACE VIII

EXECUTIVE SUMMARY IX

PART I. INTRODUCTION 1

PART II. STATUS OF PQC, QKD, AND QRNG IN A QUANTUM-SAFE CONTEXT 5

1. POST-QUANTUM CRYPTOGRAPHY 5

2. QUANTUM KEY DISTRIBUTION 6

3. QUANTUM RANDOM NUMBER GENERATORS AND CLASSICAL RANDOM NUMBER GENERATORS 8

PART III. QUANTUM-SAFE TRANSITION MODEL 11

1. RISK-BASED APPROACH 11

2. WORST-CASE PQC FAILURE SCENARIOS: WHAT IF PQC TURNS OUT TO BE WEAK? 14

3. MIXED ENCRYPTION METHODS 17

4. CHALLENGES TO THE TRANSITION TO QUANTUM SAFE 20

PART IV. POST-QUANTUM INVENTORIES 22

1. APPROACH 22

2. PRODUCT INVENTORIES 23

3. CRYPTO INVENTORIES 24

PART V. STATUS OF THE TRANSITION TO QUANTUM SAFE: EUROPEAN UNION (EU, FRANCE, GERMANY, THE NETHERLANDS) 27

1. INTRODUCTION 27

2. EUROPEAN UNION. 27

3. GERMANY 31

4. FRANCE 32

5. THE NETHERLANDS 33

PART VI. STATUS OF THE TRANSITION TO QUANTUM-SAFE: EXTRA-EU (UK, US, CHINA) 35

1. INTRODUCTION 35

2. UNITED KINGDOM 35

3. UNITED STATES 36

4. CHINA 38

PART VII. TASK FORCE COMMENTS ON THE NIS COOPERATION GROUP ROADMAP 40

1. NIS COOPERATION GROUP ROADMAP. 40

2. TASK FORCE COMMENTS ON THE NIS COOPERATION GROUP ROADMAP 41

PART VIII. TRANSITION TO PQC IN THE FINANCIAL SECTOR 53

1. INTRODUCTION 53

2. TRANSITION TO PQC IN THE FINANCIAL SECTOR 53

3. THE CURRENT REGULATORY LANDSCAPE (EU, UK, US) 54

4. TRANSITION MODELS TO QUANTUM-SAFE CRYPTOGRAPHY IN THE FINANCIAL SECTOR 57

5. INITIATIVES IN THE FINANCIAL SECTOR 60

6. BOTTLENECKS IN THE FINANCIAL SECTOR’S PQC TRANSITION 63

PART IX: TRANSITION TO QUANTUM SAFE IN THE PUBLIC SECTOR 66

1. INTRODUCTION 66

2. TRANSITION TO PQC IN THE PUBLIC SECTOR 66

3. TECHNICAL BOTTLENECKS IN THE PUBLIC SECTOR’S PQC TRANSITION 72

4. CHALLENGES TO THE TRANSITION FROM A SOCIOTECHNICAL PERSPECTIVE 73

PART X. TRANSITION TO QUANTUM SAFE IN THE DEFENCE SECTOR 77

1. INTRODUCTION 77

2. QUANTUM TECHNOLOGIES IN DEFENCE 77

3. RELEVANT STAKEHOLDERS AND QUANTUM DEFENCE INITIATIVES 80

4. QUANTUM-SAFE TRANSITION IN THE DEFENCE SECTOR 82

PART XI. RECOMMENDATIONS 83

1. GENERAL RECOMMENDATIONS 83

2. ADDITIONAL SECTOR-SPECIFIC RECOMMENDATIONS FOR THE FINANCIAL SECTOR 90

3. ADDITIONAL SECTOR-SPECIFIC RECOMMENDATIONS FOR THE PUBLIC SECTOR 91

4. ADDITIONAL SECTOR-SPECIFIC RECOMMENDATIONS FOR THE DEFENCE SECTOR 93

ANNEX I. LIST OF TASK FORCE MEMBERS AND INVITED SPEAKERS 95

ANNEX II. GLOSSARY 98

PRINCIPLES AND GUIDELINES FOR THE TASK FORCE 103