European researchers are at the forefront of quantum-secure cryptography, a crucial technology for protecting personal data and digital devices from decryption in the post-quantum era. However, as the United States intensifies its efforts to establish quantum standards, European researchers may have to relinquish their intellectual property rights in exchange for a say in the standard-setting process.
The European Union (EU) is currently building its ecosystem of supercomputers and quantum computers, but the international race for post-quantum cryptography standards has already begun. Failure to define and assert European standards could result in a competitive disadvantage, diminished influence, potential security vulnerabilities, and missed opportunities for cross-border innovation, according to Markus Pflitsch, a quantum physicist and founder of Terra Quantum AG.
In February 2022, the EU presented a standardization strategy to boost its voice in international standard-setting processes for quantum technology. However, despite the EU’s strive for technological sovereignty, it appears to be relegated to a secondary role in determining the technical standards for this disruptive technology.
European researchers have played a central role in the design and evaluation of cryptographic competitions, including post-quantum cryptography, organized by the American National Institute for Standards and Technology (NIST). These NIST standards will become the benchmark for cybersecurity worldwide. The EU sees its participation in the NIST process as an opportunity to influence international standard-setting. However, European researchers who have their algorithms selected and standardized by NIST must relinquish all intellectual property rights.
While researchers have generally been satisfied with NIST’s decisions, there are concerns about the lack of full transparency due to the influence of the US National Security Agency (NSA). Additionally, the European Telecommunications Standards Institute (ETSI), where European standardization efforts have taken place, has had a conflictual relationship with the Commission.
The EU is also involved in cryptographic solutions like quantum key distribution (QKD), but experts note its limitations, including vulnerability to man-in-the-middle attacks and the inability to operate on networks with millions of users. The EU must develop a comprehensive strategy for post-quantum migration and increase funding for research, collaboration, and education to retain its quantum talent pool and ensure technological leadership in the quantum era.