1、A Coordinated ImplementationRoadmap for the Transition toPost-Quantum CryptographyPart 1,Version:1.1,EU PQC Workstream11.06.2025Contents1Executive Summary22Introduction and motivation33Scope and definitions43.1Scope.53.2Definitions of frequently used technical terms.54Timeline64.1Overview.64.2The ti

2、meline in detail:Milestones,first and next steps.75Estimating the quantum risk96Steps towards the PQC migration116.1Introduction.116.2First Steps.116.3Next Steps.137What the EU can do15References151Executive SummaryDigital infrastructures require robust cybersecurity.Cryptographic systems are vital

3、toprotect the confidentiality and authenticity of data.Quantum computing will be a threatto many of the cryptographic algorithms used to achieve these protection goals.Data thatis currently not quantum-safe,whether it is stored or transmitted,and that must remainconfidential for a long time,may be c

4、ompromised in the future by quantum computers(“store now,decrypt later”attacks).In addition,authenticity will also be jeopardised byquantum computers.The threat that quantum computing poses to cybersecurity can becountered by a timely,comprehensive and coordinated transition to post-quantum cryp-tog

5、raphy(PQC).Consequently,on 11.04.2024,the European Commission published a“Recommendationon a Coordinated Implementation Roadmap for the transition to Post-Quantum Cryptog-raphy”1.For the development of this“Implementation Roadmap”the Commission rec-ommended to establish a work stream on PQC within t

6、he NIS Cooperation Group(NISCG).This document is the first deliverable of the NIS CG work stream on PQC and is meant tobe a first high-level paper aimed at the Member States.The set of recommendations thatMember States need to implement for a synchronised transition to PQC are divided intoFirst Step