IGF 2025 WS #511 Advancing Post-Quantum Cryptography for a Secure Future

    Organizer 1: Civil Society, Latin American and Caribbean Group (GRULAC)
    Organizer 2: Private Sector, African Group
    Organizer 3: Private Sector, Western European and Others Group (WEOG)
    Organizer 4: Technical Community, African Group
    Organizer 5: Civil Society, Latin American and Caribbean Group (GRULAC)
    Organizer 6: Civil Society, Asia-Pacific Group
    Speaker 1: Christopher Odu, Private Sector, African Group
    Speaker 2: Maria Luque, Private Sector, Western European and Others Group (WEOG)
    Speaker 3: João Moreno Falcão, Civil Society, Latin American and Caribbean Group (GRULAC)
    Format
    Roundtable
    Duration (minutes): 90
    Format description: The roundtable facilitates extensive expert insights and encourages active participation from attendees, fostering rich interaction and dialogue. This format ensures an inclusive discussion accommodating diverse perspectives from panellists and attendees, both onsite and online.
    Policy Question(s)
    How can international policies ensure equitable adoption of post-quantum cryptography across diverse geopolitical landscapes? What strategic actions should governments and manufacturers take to mitigate socioeconomic impacts arising from transitioning IoT infrastructure to PQC? How can global standards bodies and regulatory frameworks effectively address the integration of PQC into existing IoT security practices to enhance cybersecurity and digital resilience?
    What will participants gain from attending this session? Attendees will learn about quantum threats to cybersecurity, especially for IoT, through real-world vulnerability examples demonstrating the urgency of post-quantum cryptographic (PQC) solutions. The session explores international regulatory frameworks, including the EU Cyber Resilience Act, U.S. Cyber Trust Mark, and ISO/IEC guidelines, offering insights into global policy considerations. Expert perspectives will detail integration of PQC into existing security standards, addressing challenges and strategic responses. Emphasis will be placed on global collaboration among standards bodies, governments, industry, and civil society to ensure resilient digital infrastructures. Actionable recommendations will be provided to mitigate socioeconomic impacts of transitioning to quantum-resistant systems, with strategies tailored to diverse stakeholders. Participants will see how PQC can enhance critical technologies such as RPKI and other fundamental Internet infrastructures. The session aims to empower attendees to advocate for informed policy-making and implement robust cybersecurity practices in preparation for the quantum computing era.
    Description:

    This session examines the most demanding IoT security vulnerabilities, illustrated by real-world breaches that highlight the urgent need for post-quantum cryptography. Using DC-IS3C research funded by AFNIC as a base, the session delves into the societal and economic consequences of PQC and IoT security. Panellists from the technical community, private sector, academia, and civil society will explore high-profile incidents such as the Mirai botnet and healthcare IoT breaches, drawing connections between cybersecurity, societal well-being, economic stability, and environmental considerations. Participants will discuss how policy and regulatory frameworks - including the EU Cyber Resilience Act, the U.S. Cyber Trust Mark, and ISO/IEC guidelines - address or fail to address current cybersecurity needs. By referencing frameworks such as GDC 3-5 and WSIS C5, C9, and C10, the session will emphasize the links between cybersecurity, trust, and the resilience of digital infrastructures. Panellists will also examine emerging technologies and foundational Internet services, showing how post-quantum cryptographic schemes can strengthen systems like RPKI and other critical digital infrastructures. Attendees will gain deeper insight into the immediate and long-term risks associated with IoT vulnerabilities, along with the potential of post-quantum cryptography to bolster overall cybersecurity. The session seeks to inform and empower stakeholders—ranging from technical experts and policymakers to industry leaders and civil society—by offering guidance on practical PQC implementation and alignment with evolving global standards and regulations.
    Expected Outcomes
    Participants will leave with a deeper understanding of IoT vulnerabilities, post-quantum security threats, and policy-driven solutions. The session aims to produce concrete recommendations for integrating PQC within global IoT regulatory frameworks, fostering international collaboration, enhancing consumer awareness, and strengthening cybersecurity and digital resilience. The report will highlight these policy recommendations, which will be disseminated post-session.
    Hybrid Format: The session will actively facilitate interaction between onsite and online attendees through a coordinated moderation strategy. The onsite moderator will guide the roundtable discussion, while the online moderator will manage audience questions, on a round-robin basis (1 on-site, 1 online, etc…) and stimulate dialogue between panellists and the hybrid audience. The online moderator will also monitor the online chat, and ensure virtual attendees have equitable opportunities to contribute online.