Introduction
For recent updates find us on Bluesky and LinkedIn.
The migration to post-quantum cryptography (PQC) has become an important topic on the agenda of the EC and member states to protect sensitive information. However, how this migration should happen and, most importantly, what specifically to migrate to, are currently wide open questions. Clear European guidance and standards are needed to permit European IT industry to work on solutions that will be adopted and for all sectors to prepare for and start the migration to PQC.
The PQCSA project will organize the European ecosystem in the area of PQC standardization, to achieve consensus on what cryptographic functionalities and protocols to target and which choices to propose for standardization. A unified European view is necessary to counterbalance the influence of large countries which dominate the tech sector. Consensus will be reached through iterative engagement of researchers, industry as well as the security agencies of the member states and ENISA. Once it is reached, PQCSA will start processes in the respective standardization bodies.
Furthermore, PQCSA will deliver a clear and broadly supported PQC migration roadmap to clarify the next steps, when they should be taken, and also what products will be needed to get there. Both serve to give certainty to European industry that their investments will be long lived and supported by EU regulations, whether they are on the side of delivering solutions or requiring solutions.
As a third objective, PQCSA will contribute to putting PQC migration on the agendas for companies and decision makers through outreach, dissemination, and training events.
PQCSA consists of 5 partners who each have many years of experience with standardization of cryptography and security and are actively involved in PQC R&D.
Funding acknowledgement:
The PQCSA project funded under Grant Agreement No. 101190512 is supported by
the European Cybersecurity Competence Centre under the DIGITAL-
ECCC-2024-DEPLOY-CYBER-06-STANDARDPQC call.
Views and opinions expressed are however
those of the author(s) only and do not necessarily reflect those of the
European Union or the European Cybersecurity Competence Centre. Neither the
European Union nor the European Cybersecurity Competence Centre can be held
responsible for them.
The information on this website is provided as is, and no guarantee or warranty is given or implied that the information is fit for any particular purpose. The user thereof uses the information at its sole risk and liability.
Last modified: 2026.04.29.