NIST Release the Post-Quantum Cryptographic Algorithms

The GSMA Post Quantum Telco Network Task Force welcomes and celebrates the standardisation of the first 3 post quantum cryptography algorithms by the National Institute of Standards and Technology (NIST). The standardisation is the result of an international process, which started in 2016, with the ongoing participation of the international cryptography community from government, academia and industry. Each submission has gone through rigorous, multi-year public evaluation, scrutiny and debate, resulting in improvements in security and performance for the newly standardised algorithms. The outcome is a set of tested and optimised quantum resistant algorithms, addressing key encapsulation and digital signatures. The algorithms are open source and free (as published by NIST FIPS 203, FIPS 204, FIPS 205) to be implemented into code, protocols, cryptographic assets, libraries and applications.

The adoption of standardised, quantum resistant algorithms is critical in maintaining security and user trust in preparation for the quantum era. The NIST announcement is a particularly important milestone for the telecommunication industry as telco networks rely on global standards and high levels of interoperability to provide secure, trusted communication services across multiple geographical regions and a diverse ecosystem of technology suppliers. The publication of the new NIST standards will need to be considered in the context of all the downstream standards that are impacted.

The PQTN TF was created with the specific task of supporting and facilitating a coordinated approach to Post Quantum Cryptography adoption by the telecommunication ecosystem, to ensure that data and communications remain secure in the quantum era and beyond. This is not without its challenges: replacing vulnerable cryptography and integrating PQC algorithms into new and existing systems will require planning and coordination. The imperative of an effective crypto governance process, combined with a business impact driven strategy will drive a future proof approach to cryptography migration that will make it more resilient to evolving threats. For this reason, crypto agility is an essential element of the overall migration strategy. This will place new requirements on the products and security protocols used by the telecommunication industry.

The PQTN Task Force is committed to supporting the sector specific efforts required to enable and coordinate a quantum safe journey across the entire telecommunication ecosystem and we thank all of our members and collaborators for the knowledge and good will they contribute to our mission.