G+D Builds Quantum-Safe Identity for the Post-Quantum Era

Giesecke+Devrient (G+D) is advancing the development of quantum-safe digital identity technologies through the European research initiative uPQComing—“Enhancing Cyber-Resilience for the upcoming Post-Quantum era.” Funded by the Chips Joint Undertaking (Chips JU), the project aims to strengthen Europe’s critical digital infrastructure and accelerate migration toward post-quantum cryptography (PQC) in security-sensitive applications.

The initiative addresses an emerging cybersecurity challenge: sufficiently powerful quantum computers could eventually undermine widely used public-key cryptographic algorithms. Identity cards and digital identity systems are particularly important because they require long-term confidentiality, authenticity and reliability. uPQComing brings together European technology companies, research organizations and universities to develop architectures capable of resisting future quantum attacks.

Within the project, G+D is developing quantum-resistant technologies for identity-card operating systems. A central challenge is integrating PQC into resource-constrained secure elements, where computing power and memory are limited. The company is developing quantum-resistant cryptographic protocols and adapting authentication and security mechanisms specifically for highly secure identity applications.

Another key element is crypto-agility. G+D is designing architectures that allow cryptographic algorithms to be replaced or upgraded as standards, vulnerabilities and security requirements evolve. The company is also exploring hybrid approaches combining classical cryptography with quantum-safe algorithms. Such architectures could provide continuity during the transition period rather than requiring governments and enterprises to replace existing identity infrastructure immediately.

Performance remains critical. PQC algorithms can require greater processing and memory resources than conventional cryptography, creating challenges for embedded identity hardware. G+D is therefore optimizing PQC for secure communication between identity documents and terminals. The resulting technologies are being incorporated into prototypes based on G+D’s Java Card chip operating system and tested for security, efficiency and interoperability. The company says earlier work with Bundesdruckerei on Germany’s national ID card demonstrated the practical feasibility of PQC for highly secure identity documents.

The wider significance extends beyond identity cards. As digital identities become fundamental to government services, banking, travel and online transactions, protecting them against future quantum threats will become increasingly important. By combining PQC, crypto-agility, hybrid cryptography and secure embedded hardware, uPQComing is laying foundations for next-generation identity infrastructure. For Europe, the project also represents a strategic push toward technological sovereignty, ensuring that critical identity and security technologies remain resilient as the world enters the post-quantum era.