Briefings

EU States Set 2030 PQC Deadline, Japan Escalates Quantum Spending

30 November 2024

November 2024 was dominated by a coordinated push on post-quantum cryptography across both sides of the Atlantic. Eighteen EU member states issued a joint statement calling for critical systems to be migrated to quantum-resistant encryption by 2030, while NIST published its draft transition timeline proposing to deprecate all quantum-vulnerable public-key algorithms by 2035. Japan’s cabinet approved a supplementary budget including ¥1.05 trillion for next-generation chip and quantum R&D, a dramatic escalation from prior annual spending. Turkey unveiled its first domestically developed quantum computer, and Australia directed AU$60 million in defence contracts toward quantum technologies through its Advanced Strategic Capabilities Accelerator.

European Union: 18 Member States Issue Joint PQC Transition Statement with 2030 Target

What happened. On November 27, 2024, cybersecurity authorities from 18 EU member states published a joint statement titled “Securing Tomorrow, Today: Transitioning to Post-Quantum Cryptography.” Co-led by France, Germany, and the Netherlands, the statement was presented during the European Cyber Security Meeting in Athens. The signatories included Austria, Belgium, the Czech Republic, Denmark, Estonia, Finland, Greece, Ireland, Italy, Latvia, Lithuania, Luxembourg, Poland, Slovenia, and Spain. The statement recommended that systems handling the most sensitive data be protected against “store now, decrypt later” attacks by the end of 2030 at the latest. A dedicated PQC work stream, co-chaired by France, Germany, and the Netherlands, was created under the NIS Cooperation Group to prepare a harmonized EU transition roadmap. Italy’s ACN separately confirmed its participation alongside the broader initiative.

Why it matters. This is the most concrete, collectively endorsed timeline for PQC migration that European governments have produced. The 2030 target for sensitive use cases is tighter than many organizations have planned for, and the creation of a dedicated NIS Cooperation Group work stream signals that the transition will eventually feed into EU-level regulatory expectations. The statement also implicitly aligns European timelines with the trajectory set by NIST (which proposes deprecating 112-bit quantum-vulnerable algorithms after 2030), creating a transatlantic convergence point for vendors and standards bodies. For critical infrastructure operators and IT providers across the EU, the statement reframes PQC migration from an emerging best practice to an expected obligation.

What remains unclear. Whether the 18 signatories will translate the 2030 deadline into binding national requirements, or whether compliance will remain voluntary. The statement does not specify enforcement mechanisms, funding for migration, or how the timeline interacts with existing NIS2 Directive obligations. The work stream’s roadmap has not yet been published, leaving open questions about sector prioritization and hybrid cryptography guidance.

Who should care. CISOs and compliance officers at EU critical infrastructure operators, IT vendors selling into EU government markets, cryptography product developers, and standards bodies tracking European adoption timelines.

United States: NIST Draft IR 8547 Sets 2030/2035 PQC Deprecation Timeline

What happened. On November 12, 2024, NIST released the initial public draft of Internal Report 8547, “Transition to Post-Quantum Cryptography Standards.” The report proposes deprecating quantum-vulnerable public-key algorithms at 112-bit security (including RSA-2048 and P-256) after 2030 and disallowing all quantum-vulnerable public-key algorithms in NIST standards after 2035. The draft identifies the three finalized PQC standards (FIPS 203, 204, and 205) as the foundation for migration. Systems with long-term confidentiality needs, such as VPN and TLS implementations, were identified as early migration priorities. Public comments were accepted through January 10, 2025.

Why it matters. IR 8547 converts the policy ambition of National Security Memorandum 10 into a concrete technical timeline. The 2030 deprecation date for 112-bit algorithms gives federal agencies, their contractors, and the broader commercial ecosystem a defined planning horizon. Because NIST standards function as de facto global baselines, the timeline will likely propagate well beyond U.S. federal systems, influencing procurement requirements and compliance frameworks worldwide. The simultaneous appearance of the EU’s 2030 target and NIST’s 2030 deprecation date creates a consistent signal that the next five years are the effective migration window.

What remains unclear. Whether the final version of IR 8547 will adjust the 2030 and 2035 dates in response to public comments. The report does not address how legacy systems that cannot be upgraded will be handled, or how the deprecation schedule interacts with sector-specific requirements in finance, healthcare, or defence. The fourth-round PQC candidate algorithms are also not yet finalized, leaving a gap for use cases that require additional options beyond the current three standards.

Who should care. Federal agency CIOs, government contractors, cryptographic library maintainers, enterprise architects planning infrastructure refreshes, and financial regulators tracking cryptographic risk timelines.

Japan: ¥1.05 Trillion Supplementary Budget for Quantum and Semiconductor R&D

What happened. In November 2024, Japan’s cabinet approved a supplementary budget allocating ¥1.05 trillion (approximately $7 billion) for next-generation chip and quantum computing research, alongside ¥471.4 billion to support domestic advanced chip production. The allocation was part of Prime Minister Shigeru Ishiba’s broader ¥10 trillion pledge for semiconductor and AI development by 2030. The quantum component targeted expansion of R&D infrastructure including at G-QuAT. PM Ishiba subsequently designated 2025 as the “first year of quantum industrialization.”

Why it matters. The scale of this allocation represents a dramatic break from Japan’s prior annual quantum spending, which had been approximately $100 million per year in 2023 and 2024. Even accounting for the fact that the ¥1.05 trillion figure bundles semiconductor and quantum spending together, the order-of-magnitude increase signals a strategic decision to treat quantum R&D as a national economic priority on par with advanced chipmaking. The designation of 2025 as the “first year of quantum industrialization” suggests a shift in emphasis from basic research toward commercial and industrial applications.

What remains unclear. How much of the ¥1.05 trillion is specifically earmarked for quantum computing versus semiconductor manufacturing. The breakdown between these two categories will determine whether Japan’s quantum sector receives a genuine spending surge or a modest increment riding alongside a much larger chip subsidy package. The specific mechanisms for disbursement, and whether the quantum portion will flow primarily through existing institutions like G-QuAT or create new channels, have not been detailed.

Who should care. Quantum hardware companies seeking international partnerships, Japanese research institutions, semiconductor and quantum supply chain firms, and foreign governments benchmarking peer spending levels.

Turkey: First Domestically Developed Quantum Computer Unveiled

What happened. On November 21, 2024, Turkey unveiled QuanT, its first domestically developed quantum computer, at a ceremony in Ankara attended by Vice President Cevdet Yılmaz and Presidency of Defense Industries (SSB) head Haluk Görgün. The 5-qubit superconducting system was developed by TOBB ETU in collaboration with defense firm ASELSAN, building on a joint quantum technologies research laboratory established in 2022. Vice President Yılmaz announced plans to establish a superconducting chip production facility with SSB support. ASELSAN’s director of radar programs noted that the first chips used in the project were prototyped at a facility outside Turkey.

Why it matters. Turkey becomes one of an expanding group of countries that have built or acquired operational quantum computing hardware, joining a list that now spans well beyond the handful of traditional quantum research leaders. The involvement of ASELSAN, Turkey’s largest defense electronics company, and the SSB in the announcement frames this as a defence-industrial initiative rather than a purely academic one. The stated goal of establishing domestic superconducting chip fabrication would, if achieved, reduce Turkey’s dependence on foreign quantum hardware supply chains. At 5 qubits, QuanT is not a competitive research instrument in global terms, but it represents a starting point for building domestic integration and workforce capabilities.

What remains unclear. The timeline and funding for the planned domestic chip fabrication facility. Whether Turkey will develop a national quantum strategy or formal roadmap to guide future investment beyond the TOBB ETU-ASELSAN partnership. The specific applications or sectors the government intends to prioritize for quantum technology adoption are also not defined.

Who should care. Defence industry suppliers and partners in Turkey, quantum hardware exporters assessing new markets, NATO quantum cooperation planners, and policymakers in peer countries tracking the expanding geography of quantum computing capabilities.

Australia: AU$60 Million in Defence Quantum and Emerging Technology Contracts

What happened. Australia’s Advanced Strategic Capabilities Accelerator (ASCA) signed 21 contracts as part of an investment of over AU$60 million (approximately US$39 million) with Australian universities and industry partners through its Emerging and Disruptive Technologies program. Quantum-focused recipients included Q-CTRL for quantum hardware performance, Nomad Atomics for quantum sensors, Analog Quantum Circuits for superconducting devices, and QuantX Labs. Defence Industry Minister Pat Conroy said the investment gave effect to innovation priorities in the National Defence Strategy and the Defence Innovation, Science and Technology Strategy.

Why it matters. This round of contracts shows ASCA translating its stated quantum priority into procurement commitments directed at the domestic industry. The recipient list mixes established companies (Q-CTRL) with smaller firms, indicating the program is intended to build a broader supplier base rather than concentrating investment in a single national champion. The focus areas, spanning hardware performance, sensors, and superconducting devices, align with defence applications in navigation, timing, and secure communications. For Australia’s quantum startup ecosystem, ASCA contracts provide revenue and validation at a stage when commercial demand remains limited.

What remains unclear. The duration and milestones attached to individual contracts, and whether follow-on funding will depend on meeting specific performance benchmarks. How these ASCA-funded projects connect to Australia’s broader PsiQuantum investment and the National Quantum Strategy remains to be articulated.

Who should care. Australian quantum technology companies, defence primes with Australian operations, allied governments monitoring quantum-defence procurement models, and investors tracking government-backed revenue streams for quantum startups.

Also in November 2024

Norway introduced expanded export controls on quantum computing technologies, advanced semiconductors, and related items, joining a coordinated plurilateral effort. New Zealand followed suit with its own updated Strategic Goods List, bringing the number of countries with unilateral quantum export controls to at least seven.

NATO’s Transatlantic Quantum Community held its first annual plenary in Copenhagen on November 12-13, chaired by Denmark. The event brought together experts from 22 Allied nations and launched a new Quantum Industry Network to facilitate broader engagement with industry and funding leaders.

EU Commissioner-designate Henna Virkkunen, appearing at her European Parliament confirmation hearing on November 12, signaled her intention to develop an EU quantum strategy to unify efforts and coordinate investments across member states, an early indication that a formal EU Quantum Act may enter the legislative agenda.

The UK’s Responsible Quantum Industry Forum published shared principles for the responsible development and use of quantum technologies on November 18, reflecting industry consensus on transparency, accountability, security, and privacy values. Science Minister Lord Vallance endorsed the principles.


Detailed analysis of each development in this briefing, with cross-jurisdictional comparisons and implications by sector, is available to Quantum Policy Radar subscribers.

Share

Stay informed

Receive the Quantum Policy Radar Open Brief — a free selection of curated quantum policy intelligence.

We'll send you a confirmation email. No spam, unsubscribe anytime.