Post-Quantum Saturday — July 25 2026 Weekly Update

TL;DR — This Week

• ANSSI PQC Certification Mandate (2027): France's cybersecurity agency will refuse certification for security products lacking quantum-resistant encryption starting 2027; businesses expected to purchase only quantum-safe products by 2030. This accelerates European adoption and pressures global vendors.
• New Research Highlights: arXiv papers on HORCRUX (compact RISC-V PQC ISE supporting all NIST algorithms), PQC resilience via quantum ML, TLS security implications of hybrid deployments, and portable acceleration of LWE KEMs. Side-channel and implementation hardening remain active research areas.
• NIST Additional Signatures: Round 3 evaluation ongoing (9 candidates: FAEST, HAWK, MAYO, MQOM, QR-UOV, SDitH, SNOVA, SQIsign, UOV); specification tweaks due Aug 2026. FN-DSA (Falcon) and HQC standardization tracks continue independently.
• liboqs & Ecosystem: v0.16.0 (July 9) remains the stable reference; bindings and providers (oqs-provider, Rust/Go/Python) seeing increased adoption. No major new releases this week.
• Freedom-tech Takeaway: With ANSSI joining US federal deadlines (EO 14412: 2030/2031), the window for "harvest-now-decrypt-later" resistant decentralized systems is narrowing. Prioritize hybrid TLS/SSH in any new infrastructure, inventory long-lived keys in Nostr/Bitcoin/mesh, and prepare for SLH-DSA or FN-DSA in identity and attestation use cases.

The Week in Detail

1. ANSSI Sets 2027 PQC Certification Deadline — European Regulatory Momentum

France’s ANSSI (Agence Nationale de la Sécurité des Systèmes d’Information) publicly confirmed it will stop certifying security products without quantum-resistant encryption starting in 2027. The announcement, made at the France Quantum 2026 conference, aligns with earlier position papers and sets a clear expectation that businesses should purchase only quantum-safe products by 2030.

• Implications: ANSSI certification is required for French government agencies and critical infrastructure operators. This creates immediate vendor pressure and a de-facto European mandate that complements the US Executive Order 14412 (2030 encryption / 2031 signatures).
• Relevance to Ungovernable.tech: European open-source and decentralized projects (I2P, mesh networking stacks, European-hosted Nostr relays, confidential compute pilots) must now plan for PQC in any product seeking certification or government-adjacent use. Hybrid schemes and crypto-agility become competitive advantages.
• Sources: postquantum.com coverage, Reuters reporting, Schneier on Security discussion (July 2026).

2. Research & Academic Developments (arXiv July 2026)

Several papers published or highlighted in the last week advance practical PQC understanding:

• HORCRUX: A Complete PQC RISC-V eXtension Architecture (arXiv:2607.13939, Jul 15, 2026): Compact unified Instruction-Set Extension supporting all NIST-approved PQC algorithms (ML-KEM, ML-DSA, SLH-DSA, HQC). Addresses crypto-agility vs. performance vs. resource trade-offs in constrained environments. Highly relevant for embedded/IoT/mesh hardware in freedom-tech stacks.
• On the Security Implications of PQC in TLS (arXiv:2607.12504): Analyzes hybrid deployments, downgrade risks, and transcript binding requirements. Reinforces the need for careful hybrid KEM composition (e.g., X25519MLKEM768).
• Portable Acceleration of Learning With Errors KEMs and related works on QUBO modeling of MLWE, quantum ML for PQC resilience assessment.
• Broader Context: Continued focus on side-channel resistance (building on KyberSlash lessons), hardware/software co-design, and migration frameworks.

These papers strengthen the case for early integration of liboqs/PQClean into custom protocols and hardware.

3. Standardization & Policy Updates

• NIST Additional Digital Signatures (Round 3): Nine candidates advanced May 14, 2026 (FAEST, HAWK, MAYO, MQOM, QR-UOV, SDitH, SNOVA, SQIsign, UOV). Two-year evaluation window; final standards likely 2028–2030. Existing ML-DSA/SLH-DSA/FN-DSA remain the immediate priorities.
• HQC & FN-DSA Tracks: Draft FIPS documents expected 2026–2027; implementation work in liboqs already includes HQC.
• ISO Milestone: Classic McEliece achieved ISO standardization (noted in prior updates); further international alignment.
• FIPS 140-3 Pressure: Ongoing transition from FIPS 140-2 (Historical status Sept 2026) drives HSM and secure-element roadmaps.

4. Implementation & Deployment Ecosystem

• liboqs 0.16.0: Remains the canonical open-source reference (released July 9). Full standardized algorithm support; ecosystem (oqs-provider for OpenSSL, language bindings) maturing rapidly. Recommended for all new Ungovernable.tech integrations.
• Production Deployments: No major new consumer-facing rollouts this week, but continued maturation of existing hybrid TLS (Cloudflare, Google, browsers) and messaging (Signal PQXDH, Apple PQ3).
• Hardware & Embedded: HORCRUX and similar ISE proposals signal growing attention to constrained-device PQC, critical for off-grid/mesh and IoT sovereignty projects.

5. Freedom-Tech & Decentralized Systems Implications

Decentralized projects face unique pressures:

• Nostr & Identity: Long-lived public keys and event signatures benefit from SLH-DSA or hybrid schemes; crypto-agile key rotation frameworks needed.
• Bitcoin/Ethereum: Dual-address periods, BIP-style soft forks, and account abstraction advantages highlighted in recent papers. Quantum-safe wallets and migration strategies remain high priority (see Bitcoin PQ Migration).
• Mesh & Off-Grid: HORCRUX-style hardware acceleration + hybrid KEMs in protocols like cjdns/BATMAN-adv or custom mesh naming.
• Confidential Computing: Attestation keys and sealing must migrate; hybrid TLS to TEEs is the immediate step.
• Overall: 2026–2027 is the window for inventory, prototyping, and crypto-agile architecture before regulatory and threat timelines converge.

Evidence at a Glance (Recent Momentum)