Periodic Reporting for period 1 - PQ-REACT (Post Quantum Cryptography Framework for Energy Aware Contexts)
Periodo di rendicontazione: 2023-09-01 al 2025-02-28
The PQ-REACT (Post Quantum Cryptography Framework for Energy Aware Contexts) project operates at the intersection of one of the most critical technological transitions of our time: the shift toward cryptographic systems that remain secure in the presence of quantum computing capabilities. With advancements in quantum computing accelerating globally, the cryptographic foundations that underpin digital trust—such as RSA and Elliptic Curve cryptography—are becoming increasingly vulnerable. This poses a significant threat to sectors reliant on long-term data security, including energy, telecommunications, critical infrastructure, and public administration.
The project's overall objective is to design, prototype, and validate a cryptographic framework that supports post-quantum algorithms in heterogeneous and resource-constrained environments. This includes securing edge devices, smart meters, blockchain infrastructures, and 5G networks using quantum-resistant protocols and hybrid cryptographic mechanisms. A central part of PQ-REACT’s mission is to maintain cryptographic agility, allowing systems to transition without disruption as standards evolve.
The PQ-REACT project addresses the upcoming threats posed by quantum computing. PQ-REACT is creating a flexible and energy-aware cryptographic framework that enables this transition by combining classical, post-quantum, and quantum-assisted technologies such as Quantum Key Distribution (QKD). The project focuses on real-world deployment, ensuring that the cryptographic solutions are secure, efficient, and compatible with digital environments.
The project's overall objective is to design, prototype, and validate a cryptographic framework that supports post-quantum algorithms in heterogeneous and resource-constrained environments. This includes securing edge devices, smart meters, blockchain infrastructures, and 5G networks using quantum-resistant protocols and hybrid cryptographic mechanisms. A central part of PQ-REACT’s mission is to maintain cryptographic agility, allowing systems to transition without disruption as standards evolve.
The PQ-REACT project addresses the upcoming threats posed by quantum computing. PQ-REACT is creating a flexible and energy-aware cryptographic framework that enables this transition by combining classical, post-quantum, and quantum-assisted technologies such as Quantum Key Distribution (QKD). The project focuses on real-world deployment, ensuring that the cryptographic solutions are secure, efficient, and compatible with digital environments.
During RP1, PQ-REACT advanced its goal of creating a secure and scalable framework for post-quantum cryptography (PQC), designed to work across energy-aware systems like IoT, 5G networks, and blockchain platforms. The project began by carefully studying and selecting PQC algorithms standardized by NIST, focusing on key technologies like ML-DSA, SLH-DSA, and Falcon. These algorithms were evaluated in terms of their mathematical strength, software and hardware support, and performance in real-world use cases. In parallel, hybrid signature schemes—combining classical and post-quantum cryptography—were designed to ensure secure transitions without disrupting current systems. PQ-REACT also investigated combining PQC with Quantum Key Distribution (QKD) for additional security layers. These outcomes were collected in Deliverables D2.1 and D2.2 which provide a strong technical foundation for testing and deployment.
To validate the PQC algorithms and tools, the project developed infrastructure using quantum simulators, mainly through the Eclipse Qrisp framework developed by Fraunhofer. This allowed partners to simulate quantum attacks and evaluate algorithm resilience without needing physical quantum computers. Testing tools were built using known quantum methods such as Grover’s and Shor’s algorithms, while new compilation techniques (e.g. JAX-based systems) enabled more advanced testing scenarios.
PQ-REACT also activated its Open Call programme, selecting five external projects to join the ecosystem and contribute to use-case testing. The Open Call received over 30 applications.
PQ-REACT addressed legal and regulatory challenges through dedicated analysis of digital signature laws, data protection (GDPR), and cybersecurity compliance (e.g. NIS2). Legal tasks also explored how PQC affects the validity of digital evidence, blockchain compliance, and the development of risk-sharing models in insurance. Deliverables D6.1 and D6.2 summarize these findings and support the project’s legal and policy alignment.
WP7 played a key role in ecosystem building, communication, and innovation planning. PQ-REACT launched the SPQR cluster with sister project QUBIP. The project’s online presence grew steadily with 1,200+ followers across platforms. 8 peer-reviewed papers and participation in 19 events. TID led contributions to international standardization bodies like GSMA, ETSI, 3GPP, and IETF, ensuring PQ-REACT aligns with evolving global standards.
To validate the PQC algorithms and tools, the project developed infrastructure using quantum simulators, mainly through the Eclipse Qrisp framework developed by Fraunhofer. This allowed partners to simulate quantum attacks and evaluate algorithm resilience without needing physical quantum computers. Testing tools were built using known quantum methods such as Grover’s and Shor’s algorithms, while new compilation techniques (e.g. JAX-based systems) enabled more advanced testing scenarios.
PQ-REACT also activated its Open Call programme, selecting five external projects to join the ecosystem and contribute to use-case testing. The Open Call received over 30 applications.
PQ-REACT addressed legal and regulatory challenges through dedicated analysis of digital signature laws, data protection (GDPR), and cybersecurity compliance (e.g. NIS2). Legal tasks also explored how PQC affects the validity of digital evidence, blockchain compliance, and the development of risk-sharing models in insurance. Deliverables D6.1 and D6.2 summarize these findings and support the project’s legal and policy alignment.
WP7 played a key role in ecosystem building, communication, and innovation planning. PQ-REACT launched the SPQR cluster with sister project QUBIP. The project’s online presence grew steadily with 1,200+ followers across platforms. 8 peer-reviewed papers and participation in 19 events. TID led contributions to international standardization bodies like GSMA, ETSI, 3GPP, and IETF, ensuring PQ-REACT aligns with evolving global standards.
PQ-REACT has defined a framework where classical, post-quantum, and even quantum-assisted methods can coexist and be integrated into standard secure communication protocols (e.g. TLS, SSH). The project implemented and benchmarked hybrid digital signature schemes and provided early tools to evaluate performance trade-offs (e.g. message size, latency, CPU load) in real systems. This enables organizations to gradually adopt PQC while preserving backward compatibility, which is essential for adoption in systems that require long-term data integrity and multi-device interoperability. The integration of PQC with Quantum Key Distribution (QKD) in telecom infrastructures also represents a pioneering step toward next-generation quantum-resilient networks.
PQ-REACT’s open-source quantum validation platform, powered by Eclipse Qrisp, marks a leap forward in accessible cryptanalysis and PQC benchmarking. It allows developers and researchers to test PQC algorithms against simulated quantum computing environments. This lowers the entry barrier for testing new cryptographic ideas and supports the evaluation of standardized algorithms under quantum attack models. It also provides an open and reusable toolset for future research and industrial applications. The project has started building a Validation Engine and algorithm repository that, when fully developed, will serve as a shared resource for the European PQC ecosystem and further promote innovation and standard adoption.
Further research and testing is required to extend cryptographic agility tools across more protocols and network devices. Wider demonstration and piloting, particularly in other sectors, will support generalization of the results. To reach the market, access to financing and SME engagement will be key, especially through targeted Open Calls and partnerships. Continued alignment with international standards and regulatory bodies (e.g. NIST, ETSI, IETF) will be crucial to maintain compatibility and uptake.
PQ-REACT’s open-source quantum validation platform, powered by Eclipse Qrisp, marks a leap forward in accessible cryptanalysis and PQC benchmarking. It allows developers and researchers to test PQC algorithms against simulated quantum computing environments. This lowers the entry barrier for testing new cryptographic ideas and supports the evaluation of standardized algorithms under quantum attack models. It also provides an open and reusable toolset for future research and industrial applications. The project has started building a Validation Engine and algorithm repository that, when fully developed, will serve as a shared resource for the European PQC ecosystem and further promote innovation and standard adoption.
Further research and testing is required to extend cryptographic agility tools across more protocols and network devices. Wider demonstration and piloting, particularly in other sectors, will support generalization of the results. To reach the market, access to financing and SME engagement will be key, especially through targeted Open Calls and partnerships. Continued alignment with international standards and regulatory bodies (e.g. NIST, ETSI, IETF) will be crucial to maintain compatibility and uptake.