Abstract
The emergence of large-scale quantum computing poses a concrete threat to the public-key cryptographic algorithms widely used in today’s information technology systems. Over the past three decades, post-quantum cryptography (PQC) and quantum key distribution (QKD) have been proposed to protect against this threat. This article traces the formation and output of research and standards organizations that made these technologies viable for deployment, with particular attention to ETSI, and the NIST Post-Quantum Cryptography standardisation initiative. The article argues that necessity and standardisation, rather than any single technical contribution, was the decisive factor in taking this research from academia and laboratories into an interoperable ecosystem now reaching production deployment. The article further conjectures on reasons why PQC will see much broader adoption than QKD based on some basic principles of adoption of standardized technologies.
References
“PQCrypto 2006: International Workshop on Post-Quantum Cryptography,” 23–26 May 2006, Katholieke Universiteit Leuven, Belgium. Available: http://postquantum.cr.yp.to/pqcrypto2006record.pdf.
ANSSI (2024) (France), “Avis relatif a la migration vers la cryptographie post-quantique,” https://messervices.cyber.gouv.fr/guides/avis-de-lanssi-sur-la-migration-vers-la-cryptographie-post-quantique.
Bennett, C.H., Brassard, G., “Quantum Cryptography: Public Key Distribution and Coin Tossing,” in Proceedings of IEEE International Conference on Computers, Systems and Signal Processing, Bangalore, India, 1984, pp. 175–179. https://doi.org/10.1016/j.tcs.2014.05.025.
Bernstein, D.J. and Lange, T., “Post-Quantum Cryptography - Conferences,” http://pqcrypto.orgpqcrypto.org, accessed 3 August 2026. Available: https://pqcrypto.org/conferences.html.
Bernstein, D.J., Lange, T., Peters, C., “Attacking and Defending the McEliece Cryptosystem,” in Post-Quantum Cryptography (PQCrypto 2008), Lecture Notes in Computer Science, vol. 5299, pp. 31–46. Springer. https://eprint.iacr.org/2008/318.pdf.
Cain, M., Xu, Q., King, R., Picard, L.R.B., Levine, H., Endres, M., Preskill, J., Huang, H.-Y., Bluvstein, D., “Shor’s algorithm is possible with as few as 10,000 reconfigurable atomic qubits,” arXiv:2603.28627 [quant-ph], 30 March 2026. https://arxiv.org/abs/2603.28627.
Campagna, M., Chen, L. et al., “Quantum Safe Cryptography and Security: An introduction, benefits, enablers and challenges,” 2014. Available: https://docbox.etsi.org/Workshop/2013/201309_CRYPTO/Quantum_Safe_Whitepaper_1_0_0.pdf.
ETSI GS QKD 016 V2.1.1, “Quantum Key Distribution (QKD); Common Criteria Protection Profile - Pair of Prepare and Measure Quantum Key Distribution Modules,” January 2024. Available: https://www.etsi.org/deliver/etsi_gs/QKD/001_099/016/02.01.01_60/gs_QKD016v020101p.pdf.
ETSI TR 103967 V1.1.1, “Cyber Security (CYBER); Quantum-Safe Cryptography (QSC); Impact of Quantum Computing on Symmetric Cryptography,” January 2025. https://cdn.standards.iteh.ai/samples/64860/b4aa090bec73481db535d075f687dfa8/ETSI-TR-103-967-V1-1-1-2025-01-.pdf.
ETSI TR 104016 V1.1.1, “CYBER; Quantum-Safe Cryptography (QSC); A Repeatable Framework for Quantum-Safe Migrations,” 2024. https://www.etsi.org/deliver/etsi_tr/104000_104099/104016/01.01.01_60/tr_104016v010101p.pdf
ETSI TS 103744 V1.2.2, “CYBER; Quantum-Safe Cryptography (QSC); Quantum-safe Hybrid Key Establishment,” March 2025. https://www.etsi.org/deliver/etsi_ts/103700_103799/103744/01.02.02_60/ts_103744v010202p.pdf
ETSI TS 104146 (in development), “Cybersecurity (CYBER); Quantum-Safe Cryptography (QSC); Authenticated Quantum-Safe Hybrid Key Establishment,” STF 648, 2026.
ETSI, “e-Proceedings: 1st ETSI/IQC Quantum Safe Cryptography Workshop,” September 2013. Available: https://docbox.etsi.org/Workshop/2013/201309_CRYPTO/e-proceedings_Crypto_2013.pdf.
ETSI, “Specialist Task Force 648: Quantum-Safe Cryptography – Authenticated Hybrid Key Establishment and Secure Implementation Guidance,” ETSI Portal. Available: https://portal.etsi.org/STF/STFs/STFHomePages/STF648.
Hoffstein, J., Pipher, J., Silverman, J.H., “NTRU: A Ring-Based Public Key Cryptosystem,” in Buhler, J.P. (ed.) Algorithmic Number Theory (ANTS-III), Lecture Notes in Computer Science, vol. 1423, 1998, pp. 267–288. Springer, Berlin, Heidelberg. http://csclub.cs.sjsu.edu/faculty/pollett/masters/Semesters/Spring21/michaela/files/Hoffstein97.pdf.
Kampanakis, P., Kwiatkowski, K. et al., “Post-quantum hybrid ECDHE-MLKEM Key Agreement for TLSv1.3,” IETF Internet-Draft, draft-ietf-tls-ecdhe-mlkem-02, November 2025. Available: https://datatracker.ietf.org/doc/html/draft-ietf-tls-ecdhe-mlkem-02.
Lamport, L., “Constructing Digital Signatures from a One-Way Function,” SRI International, Technical Report CSL-98, October 1979. https://di-mgt.com.au/docs/Lamport79-Constructing-Digital-Signatures-from-a-One-Way-Function.pdf.
McEliece, R.J., “A Public-Key Cryptosystem Based On Algebraic Coding Theory,” DSN Progress Report, 42–44, 1978, pp. 114–116. https://ntrs.nasa.gov/api/citations/19780016269/downloads/19780016269.pdf#page=123.
Merkle, R.C., “Secrecy, Authentication, and Public Key Systems,” Ph.D. dissertation, Stanford University, 1979. (Reprinted as Technical Report No. 1979-1, Information Systems Laboratory, Stanford.) https://www.proquest.com/openview/1ae50982b34bee7e3f1b8e232bb98e42/1?pq-origsite=gscholar&cbl=18750&diss=y.
National Security Agency, “Commercial National Security Algorithm Suite,” Information Assurance Directorate, 19 August 2015. Available: https://apps.nsa.gov/iaarchive/programs/iad-initiatives/cnsa-suite.cfm.
National Security Agency, “Fact Sheet NSA Suite B Cryptography,” 16 February 2005. Available: http://web.archive.org/20051128182632/www.nsa.gov/ia/industry/crypto_suite_b.cfm.
NCSC (UK), “Quantum Security Technologies,” Guidance, 2025. https://www.ncsc.gov.uk/paper/quantum-security-technologies.
NIST, “NIST Announces First Four Quantum-Resistant Cryptographic Algorithms,” July 5, 2022. Available: https://www.nist.gov/news-events/news/2022/07/nist-announces-first-four-quantum-resistant-cryptographic-algorithms.
NIST, “NIST Releases First 3 Finalized Post-Quantum Encryption Standards,” August 13, 2024. Available: https://www.nist.gov/news-events/news/2024/08/nist-releases-first-3-finalized-post-quantum-encryption-standards.
NIST, “Workshop on Cybersecurity in a Post-Quantum World,” April 2–3, 2015, Gaithersburg, MD. Available: https://csrc.nist.gov/Events/2015/Workshop-on-Cybersecurity-in-a-Post-Quantum-World.
Poppe, A., Peev, M., Maurhart, O., “Outline of the SECOQC Quantum-Key-Distribution Network in Vienna,” arXiv:0804.0122, 2008. Also published in International Journal of Quantum Information, 6(2), 209-218. https://doi.org/10.1142/S0219749908003529.
Shor, P.W., “Algorithms for quantum computation: Discrete logarithms and factoring,” Proceedings 35th Annual Symposium on Foundations of Computer Science, 1994, pp. 124–134. doi: 10.1109/SFCS.1994.365700.
Swann, G.M.P., “The Economics of Standardisation,” Report for the Department of Trade and Industry, London, 2000. Available: https://webarchive.nationalarchives.gov.uk/ukgwa/20070628230000/http://www.dti.gov.uk/files/file11312.pdf.
Swann, G.M.P., “The Economics of Standardisation: An Update,” Report for the Department of Business, Innovation and Skills, BIS Occasional Paper No. 2, London, 2010. Available: https://assets.publishing.service.gov.uk/government/uploads/system/uploads/attachment_data/file/32444/10-1135-economics-of-standardization-update.pdf