Participation in the IPEN Event
Mandat International and IoT Lab participated in the IPEN event on post-quantum cryptography, organised by the European Data Protection Supervisor (EDPS) and the Paris Lodron University of Salzburg (PLUS). The event took place both virtually and physically in Salzburg on 8 September 2026.
The event focused on the implications of quantum computing for data protection and the solutions offered by post-quantum cryptography to address these emerging challenges.
Quantum Computing and Data Protection
The audience brought together industry engineers, academic researchers and experts from public institutions. The introductory session provided an overview of the history of cryptography, including the emergence of post-quantum cryptography as a response to the potential impact of quantum computing.
The following presentation highlighted the need to take action now to secure Internet communications in preparation for the future deployment of quantum computers. Although no firm timeline can currently be established for the widespread availability of quantum computers, organisations need to begin preparing for the potential risks they pose. In particular, existing encryption algorithms could become obsolete or insecure in the face of sufficiently powerful quantum computers, potentially putting sensitive data and communications at risk.
Post-Quantum Cryptography Solutions
The next presentation explored how post-quantum cryptography can help secure communications involving personal and sensitive data. Different algorithms developed for this purpose, including ML-KEM and ML-DSA, were briefly introduced. The discussion also covered technical solutions involving post-quantum encryption that could be used to protect personal and sensitive data during Internet communications. These approaches aim to support the transition towards cryptographic systems that can remain secure in a future quantum computing environment.
The Cost of Inaction
The event also addressed the cost of inaction, particularly from a legal and organisational perspective. Organisations that fail to take appropriate measures to secure their online services and websites may face increased risks as the technological landscape evolves. Companies and public organisations therefore need to prepare their employees for the transition to the quantum era, while continuously monitoring developments in quantum computing and post-quantum cryptography. Preparing in advance is particularly important given the time and resources that may be required to transition from existing cryptographic systems to new solutions.
Relevance to Q-FENCE
The event was particularly useful in bringing together the legal and technical dimensions of data protection. It highlighted how regulatory and legal considerations need to be considered alongside the development and deployment of technical measures to ensure the long-term security of Internet communications.
These discussions are directly relevant to Q-FENCE, which is developing solutions addressing emerging cybersecurity challenges. The developments undertaken since the beginning of the project can contribute to addressing the security requirements of organisations as they prepare for the transition towards the post-quantum era.