Key Takeaways
- The International Organisation for Standardisation (ISO) has added the Classic McEliece algorithm to its ISO/IEC 18033‑2 standard for asymmetric ciphers, making it the first post‑quantum cryptography (PQC) scheme to achieve global standardization.
- Organisations in ISO’s 177 member states can now adopt Classic McEliece to protect data against both classical computers and future quantum‑computer attacks enabled by Shor’s algorithm.
- Governments such as Germany’s BSI and the Netherlands’ NCSC already recommend Classic McEliece for its proven resistance to cryptanalytic efforts dating back to the 1970s.
- The algorithm, based on error‑correcting codes and a refined version of Robert McEliece’s 1978 cryptosystem, offers the smallest ciphertext among known PQC key‑encapsulation mechanisms (KEMs) and allows reusable public keys, facilitating frequent ephemeral key exchange.
- Real‑world demonstrations—including the first airborne, battlefield‑ready quantum‑safe drones developed with Czech defence manufacturer STV Group—show that Classic McEliece’s large key size does not impede practical deployment.
- Post‑Quantum, the UK‑based firm that pioneered Classic McEliece, continues to drive adoption through NATO collaborations, IETF standard‑setting work, and participation in the US NCCoE quantum‑migration consortium.
Overview of the Quantum Threat Landscape
Today’s widely deployed encryption schemes are vulnerable to a sufficiently mature quantum computer running Shor’s algorithm, a scenario often termed Q‑Day. Even before such a device exists, adversaries are practicing “Harvest Now, Decrypt Later” (HNDL), exfiltrating encrypted data today with the intent to decrypt it once quantum capabilities arrive. Recent advances—particularly Google’s use of artificial intelligence to optimise Shor’s algorithm—have lowered the estimated qubit requirement, prompting experts to warn that current cryptography could be broken within the next three years. This accelerating timeline has intensified the urgency for quantum‑safe alternatives that can be deployed now and remain secure against both classical and quantum attacks.
ISO Standardisation of Classic McEliece
In response to the looming threat, the International Organisation for Standardisation (ISO) voted to include Classic McEliece in its ISO/IEC 18033‑2 standard for asymmetric ciphers. The decision followed a rigorous review by independent technical experts drawn from ISO’s 177 member states, ensuring broad consensus on the algorithm’s security and implementability. As a result, any organisation operating within an ISO member jurisdiction can now adopt Classic McEliece under an internationally recognised standard that guarantees interoperability, robust implementation guidance, and a clear path for compliance with emerging regulatory requirements.
Technical Foundations and Advantages of Classic McEliece
Classic McEliece is a refined, high‑performance variant of the original McEliece cryptosystem invented by Professor Robert McEliece in 1978. Its security relies on the hardness of decoding random linear codes, a problem that has resisted cryptanalytic breakthroughs for over four decades. By intentionally inserting random errors during encryption, only the legitimate holder of the private error‑correcting code can recover the plaintext. Compared with other post‑quantum key‑encapsulation mechanisms, Classic McEliece produces the smallest ciphertext, reducing bandwidth overhead, and its public key can be reused across multiple sessions, making it ideal for protocols that require frequent ephemeral key establishment such as TLS 1.3 or VPN handshakes.
Government and Industry Endorsements
National cybersecurity authorities have already recognised Classic McEliece’s strengths. Germany’s Federal Office for Information Security (BSI) and the Netherlands’ National Cyber Security Centre (NCSC) list the algorithm among their recommended post‑quantum solutions, citing its unmatched security credentials and long‑standing resistance to attack. These endorsements provide a strong policy signal for critical sectors—defence, finance, healthcare, and critical national infrastructure—to prioritise Classic McEliece in their migration roadmaps.
Core Applications and Use Cases
The standardised algorithm is suited to a variety of high‑value scenarios:
- Quantum‑safe Virtual Private Networks (VPNs): Forming the backbone of encrypted tunnels that protect communications between users, data centres, and cloud environments.
- Long‑term data‑in‑transit protection: Securing sensitive information such as healthcare records, intellectual property, and government secrets that must remain confidential for decades.
- Mobile messaging security: Preventing interception of instant‑message content on smartphones and tablets.
- Connected device security: Safeguarding telemetry and command links for drones, IoT sensors, and other edge devices operating in hostile or denied environments.
- Identity and credential systems: Ensuring that passwords, biometric templates, and authentication tokens cannot be exposed during transmission.
These applications benefit from Classic McEliece’s low latency, modest computational footprint on modern hardware, and compatibility with existing cryptographic agility frameworks.
Real‑World Demonstrations: Battlefield‑Ready Quantum‑Safe Drones
Through a partnership with Czech defence manufacturer STV Group, Post‑Quantum recently showcased the first airborne deployment of Classic McEliece. The programme yielded the world’s first battlefield‑ready quantum‑safe drones capable of operating in DDIL (Denied, Degraded, Intermittent, or Limited) environments. Tested at STV’s weapons facility, the drones demonstrated that the algorithm’s traditionally large key size does not impede real‑world performance, dispelling a common myth about its impracticality. This successful field trial underscores Classic McEliece’s viability for defence‑grade communications where reliability and security are paramount.
Statements from Leadership
Rikky Hasan, CEO of Post‑Quantum, emphasised that ISO standardisation removes a major barrier to adoption, allowing governments and enterprises to implement Classic McEliece consistently and at scale. He noted that the cryptographic community has unsuccessfully challenged the McEliece framework since the 1970s, and that Classic McEliece now offers the highest security assurance among available post‑quantum algorithms. Hasan also highlighted the company’s work with NATO and STV as proof that the algorithm meets stringent operational requirements across diverse use cases.
About Post‑Quantum: Driving the Quantum‑Safe Transition
Founded in 2009, Post‑Quantum was the first firm dedicated exclusively to developing and promoting post‑quantum cryptography. The company’s portfolio includes modular software for identity, transmission, and encryption that is interoperable, backward‑compatible, and crypto‑agile—facilitating a seamless migration to quantum‑safe standards. Post‑Quantum’s quantum‑safe VPN has undergone NATO testing, and its technology is licensed to STV Group for securing drone‑operator links. Beyond Classic McEliece, the firm authored the original IETF standard for a Hybrid Post‑Quantum Virtual Private Network and continues to propose new IETF specifications that will shape the internet’s evolution in a post‑quantum era. Additionally, Post‑Quantum contributes to the US National Cybersecurity Center of Excellence (NCCoE) quantum‑migration consortium, helping organisations develop practical migration strategies.
Broader Implications and Future Outlook
ISO’s endorsement of Classic McEliece marks a pivotal moment in the global transition to quantum‑resistant security. By providing a universally accepted, open‑source algorithm, the standard reduces fragmentation, encourages vendor support, and accelerates compliance with forthcoming regulations such as the EU’s Cyber Resilience Act and the U.S. National Security Memorandum on Quantum‑Ready Cryptography. As more organisations integrate Classic McEliece into TLS, IPsec, SSH, and messaging protocols, the collective attack surface for both classical and quantum adversaries will shrink. Looking ahead, continued collaboration between industry, standards bodies, and governments will be essential to address implementation challenges, optimise performance on constrained devices, and ensure that the broader cryptographic ecosystem remains agile enough to adopt future PQC advancements as they emerge.
Conclusion
The inclusion of Classic McEliece in ISO/IEC 18033‑2 represents a decisive step toward securing digital communications against the impending quantum threat. Its proven security, efficient ciphertext size, reusable public keys, and demonstrated suitability for demanding environments—such as battlefield drones—make it a pragmatic choice for enterprises and governments worldwide. With strong backing from national cybersecurity agencies, real‑world validation, and the ongoing advocacy of pioneers like Post‑Quantum, Classic McEliece is poised to become a cornerstone of the quantum‑safe cryptographic landscape for the next decade and beyond.