On December 30, 2022, Spain’s Centro Criptológico Nacional (CCN), part of the National Intelligence Centre (CNI), published document CCN-TEC 009 titled “Recommendations for a Safe Post-Quantum Transition.” The document was developed by the CCN’s Department of ICT Security Products and Technologies (CCN-PYTEC).
The guidance provided a summary of key aspects of quantum computing and quantum cryptography along with associated risks. It set out guidelines for migration planning, key encapsulation mechanisms, digital signatures, hash-based signatures for firmware updates, and key lengths for symmetric algorithms and hash functions. The document also addressed hybrid solutions and crypto-agility.
The publication included a recommended calendar for carrying out the described actions. The CCN said the document was part of a series of technology briefings intended to explain, in simple and concise terms, various topics related to information and communications technology security.