en.Wedoany.com Reported - The International Organization for Standardization (ISO) has incorporated the post-quantum cryptographic algorithm Classic McEliece into its asymmetric encryption standard (ISO/IEC 18033-2). Organizations from ISO's 177 member countries can now adopt this international standard to upgrade to quantum-safe encryption. This standardization decision stems from the industry's urgent assessment of the quantum computing threat: Google recently used artificial intelligence to optimize Shor's algorithm, reducing the number of physical qubits required to break existing encryption, leading renowned experts to estimate that current encryption technologies could be compromised within the next three years. Attackers are already stealing encrypted data for future decryption (the "harvest now, decrypt later" strategy), accelerating the arrival of the so-called "Q-Day."
The Classic McEliece algorithm is open-source and was pioneered by a team from the UK cybersecurity company Post-Quantum, in collaboration with renowned cryptographers. Based on a cryptosystem invented by Professor Robert McEliece in 1978, it leverages error-correcting codes by intentionally inserting random errors during encryption, allowing only the intended recipient to decrypt using error-correction techniques. Its ciphertext is the smallest among all known post-quantum cryptography (PQC) key encapsulation mechanisms, offering the highest efficiency, with reusable public keys suitable for applications requiring frequent ephemeral key establishment. Recommended by national bodies such as Germany's BSI and its Dutch counterpart, the algorithm is widely regarded by the cryptographic community as the most secure PQC algorithm currently available. Its applications include quantum-safe virtual private networks (VPNs), long-lifecycle data transmission (e.g., medical data, intellectual property, or government secrets), mobile messaging apps, connected devices (such as drones), and identity system protection.
Through a partnership with Czech defense manufacturer STV Group, Post-Quantum recently demonstrated the first aerial deployment of Classic McEliece, producing the world's first batch of battlefield-grade quantum-safe drones capable of operating in the most challenging DDIL (Denied, Degraded, Intermittent, or Limited) environments. Successfully tested at STV's weapons facility, this broke the myth that the algorithm's key size is too large for practical deployment. Post-Quantum CEO Rikky Hasan stated that every major organization should now move from the planning phase to actual implementation of quantum-safe encryption. ISO standardization means governments and enterprises worldwide can implement the algorithm more easily and consistently. The cryptographic community has continuously attacked the McEliece system since the 1970s without success, and Classic McEliece offers the highest security assurance currently available. Collaboration with NATO and STV has proven its feasibility across a wide range of use cases. The decision to standardize Classic McEliece by ISO required a successful vote by independent technical experts from ISO member countries. Hasan added that this demonstrates the technical community's trust in the algorithm and its suitability for protecting communications against quantum computer attacks.
Founded in 2009, Post-Quantum is the first company focused on post-quantum cryptography (PQC), serving various security domains for banks, defense organizations, and governments. Its quantum-safe VPN has passed NATO testing, and the technology has been licensed to STV Group to secure communications between drones and operators. Classic McEliece is a higher-performance improved version of the original McEliece cryptosystem, created by merging Post-Quantum's NTS-KEM submission to NIST with a submission led by Professor Daniel Bernstein.
