Share
Print

Deployment of Post Quantum Cryptography in systems in industrial sectors
DIGITAL-ECCC-2024-DEPLOY-CYBER-06-PQCINDUSTRY
Programme: Digital Europe Programme (DIGITAL)
Call: Deployment Actions in the area of Cybersecurity (DIGITAL-ECCC-2024-DEPLOY-CYBER-06)
Type of action: DIGITAL-JU-SIMPLE DIGITAL JU Simple Grants
Type of MGA: DIGITAL Action Grant Budget-Based [DIGITAL-AG]
Deadline model: single-stage
Planned opening date: 16 January 2024
Deadline date: 26 March 2024 17:00:00 Brussels time
ExpectedOutcome:
Outcomes and deliverables
PQC system validation and PQC technology ready for wide-spread deployment in given industrial sectors
Long-term protection of critical assets, long-term information security and operational continuity in the advent of quantum computers
Migration checklists and plans for PQC in sectors where this has not yet taken place.
Objective:
The objective is to enable the adoption of PQC in industrial sectors like automotive, automation, finance, control systems or energy. The overarching aim is to seamlessly integrate PQC systems, equipment, components, protocols, and network technologies into existing digital security and communication networks.
Scope:
Proposals should focus on the integration of a standardised PQC protocol into the digital security and communication networks in the automotive, automation, finance, or energy sector, while taking into account specific needs of the sector, such as necessary keys strength and keys management. Proposals should cover the development or adaptation of the required software/hardware and the validation of the solution in a large-scale demonstrator. This includes creating an inventory of assets requiring protection with a quantified level of risk, a migration plan for both the migrating entities and their suppliers and customers, taking into account data protection policies, contributing to the development of standards and certification. Successful consortia are expected to raise awareness on the need to transition to PQC and share their experience and best practice.
This action aims at the creation of a technology that will be used to protect the cybersecurity of critical industrial assets with a new paradigm that is set to be a game changer in encryption. The control of such tools is of utmost importance for governments and industry alike, as they could be exploited by malicious actors. As such, they must be protected against possible dependencies and vulnerabilities in cybersecurity to pre-empt foreign influence and control. Participation of non-EU entities entails the risk of highly sensitive information about security infrastructure, risks and incidents being subject to legislation or pressure that obliges those non-EU entities to disclose this information to non-EU governments, with an unpredictable security risk. Therefore, based on the outlined security reasons, the actions relating to these technologies are subject to Article 12(5) of Regulation (EU) 2021/694.

EuropeAid is an agency responsible for designing European international cooperation and development policy and delivering aid worldwide. Its purpose is to aid in the reduction and eventual abolition of poverty in developing nations by fostering sustainable development, democracy, peace and security. With its partner nations, EuropeAid walks alongside them on their journey to sustainable development, continually adapting its help to their changing requirements. EuropeAid is also concerned with increasing the value and impact of aid money by ensuring that help is provided appropriately.
Under the donor EC - European Commission, DevelopmentAid covers the following entities:
Departments / Directorate Generals
Agencies
EU Bodies
Focuses on strengthening safety and security systems while supporting conflict prevention, stabilization, and long-term peacebuilding efforts.
Features information and communication technologies, digital systems, and telecommunications infrastructure and services.