ETSI Revolutionizes Digital Security with New Post-Quantum Standard

On March 25, 2025, ETSI announced the release of its post-quantum security standard to ensure the protection of critical data and communications in the future.

The "Quantum-Secure Hybrid Key Exchanges with Hidden Access Policies" specification has been developed to enhance security mechanisms, ensuring that only authorized users with the correct permissions can access sensitive data for decryption.

The new ETSI specification defines a scheme for Key Encapsulation Mechanisms (KEMs) with Access Control (KEMAC), called Covercrypt, which guarantees both pre- and post-quantum security through hybridization. This means that encryption remains secure against current threats and future quantum computing capabilities, offering a seamless transition to a more advanced cryptographic landscape. Specifically, session keys will be locked based on user attributes, kept anonymous, and any user with attributes that meet the encapsulation policy will be able to retrieve session keys, while unauthorized users will not be able to do so.

**WHY? **

The release of the new ETSI standard for quantum-secure hybrid key exchanges has a significant impact as it represents a significant threat to current encryption methods. This new standard ensures that critical data remains protected against both current and future threats, which is essential for information security.

It facilitates a seamless transition to a more advanced cryptographic environment, ensuring that organizations can adapt to new quantum computing capabilities without compromising security.

The Covercrypt solution is extremely efficient, encapsulating and decapsulating session keys in microseconds, which is crucial for applications requiring high speed and performance.

It helps organizations comply with evolving security standards, which is vital to maintaining trust and regulatory compliance.

**WHO? **

Therefore, it directly impacts organizations and businesses, IT and security departments, security software developers, governments and public entities, researchers, and academia.

**CONCLUSION: **

The impact is high due to the importance of protecting sensitive data against emerging threats and the need for an efficient transition to post-quantum cryptography.