Estonian PQC Migration Roadmap
· 14:30 – 15:00 Amsterdam time · Red hall
This presentation outlines Estonia's roadmap for transitioning the public sector to post-quantum cryptography (PQC), officially released in April 2026. Given the significant heterogeneity in cryptographic architectures, technical capacity, and operational criticality across public sector organisations, a uniform migration approach is neither feasible nor optimal. Instead, the roadmap introduces a risk-based categorisation framework that divides public sector institutions into four priority categories (Very High, High, Medium, and Low), each associated with distinct migration timelines and tailored implementation guidelines. A particular focus is placed on low-priority organisations, whose transition steps remain underdeveloped in most existing roadmaps.
The talk first presents the developed organisation categorisation approach and the underlying risk-assessment criteria. It then details the migration framework, outlining preparation, cryptographic inventory, implementation, and monitoring steps tailored in their specifics to each priority level. Finally, in a landscape where multiple national and international PQC migration strategies are converging, the session presents a comparison with some of the existing roadmaps, along with lessons learned through the process of constructing Estonia's PQC migration roadmap.
Speakers
- Junior Researcher · Cybernetica AS
Jelizaveta Vakarjuk is a junior researcher in Cybernetica and industrial PhD student at Tallinn University of Technology. Her research focuses on post-quantum cryptography, privacy-preserving cryptography, and security of voting systems. Mainly she does research on post-quantum digital signatures, but also focuses on the aspects of migration to post-quantum cryptography, being one of the authors of Estonian PQC migration roadmap.
Attendance
Open session · first come, first served
Saving interest does not reserve a seat. Admission remains first come, first served.
Save favorite
