Germany Issues Joint Federal PQC Migration Guidelines to Align with EU Post-Quantum Roadmap
AI-summarised brief · reviewed before publication
Germany’s Federal Ministry for Digital and State Modernization, the Interior Ministry and the Federal Office for Information Security have released joint guidelines outlining a national migration to post‑quantum cryptography (PQC). The document translates the EU’s Coordinated Implementation Roadmap for PQC, adopted by NIS Workstream members in June 2025, into a concrete German framework. It stresses crypto‑agility to counter AI‑driven attacks on RSA and ECC, and mandates hybrid schemes that combine classical algorithms with NIST‑standardized PQC to mitigate “store‑now, decrypt‑later” threats for long‑lived data. Under Section 30 of the BSI Act, operators of critical and essential infrastructure must embed PQC readiness in their risk‑management processes, referencing Technical Guideline BSI TR‑02102. The guidelines are publicly available via the BSI pressroom and publication portal.
💡 Why It Matters
- · By binding critical‑infrastructure operators to hybrid PQC adoption now, Germany forces an industry‑wide upgrade before quantum computers become practical, averting a massive future decryption risk.