G+D Develops Quantum-Safe Technologies for Next-Generation Identity Cards

Insider Brief

• Giesecke+Devrient (G+D) is contributing to the European uPQComing project to develop quantum-safe technologies for identity cards and digital identity systems.
• G+D is working on integrating post-quantum cryptography into resource-constrained embedded secure elements used in identity cards, including quantum-resistant protocols and crypto-agile architectures.
• The company is developing and testing prototypes for a Java Card operating system, with a focus on security, performance, efficiency and interoperability during the transition to PQC.

PRESS RELEASE — SecurityTech company Giesecke+Devrient (G+D) is contributing its expertise to the European research project uPQComing (“Enhancing Cyber-Resilience for the upcoming Post-Quantum era”) and developing technologies for the next generation of quantum-safe identity cards. The project, funded by the Chips Joint Undertaking (Chips JU), aims to prepare critical digital infrastructure for the challenges of the quantum era and to accelerate the transition to post-quantum cryptography (PQC) in security-relevant applications.

The development of powerful quantum computers poses a growing challenge to today’s cryptographic methods. Applications that require long-term security, privacy, and reliability – such as identity cards and digital identity systems – need future-proof protection mechanisms. Through uPQComing, a European consortium of industry partners, research institutes, and universities is developing solutions to increase the resilience of critical systems against future quantum attacks.

As part of the project, G+D is developing quantum-resistant technologies for identity card operating systems, laying the foundation for secure identity applications in the post-quantum era. The focus is on integrating post-quantum cryptography into resource-constrained embedded secure elements, such as those used in modern identity cards.

Key tasks for G+D include developing quantum-resistant cryptographic protocols, adapting existing authentication and security mechanisms, and implementing crypto-agile system architectures. These capabilities enable cryptographic algorithms to be updated and adapted more flexibly, helping organizations respond efficiently to evolving security requirements. At the same time, G+D is investigating hybrid approaches that combine classical and quantum-safe methods to ensure robust security during the transition to post-quantum cryptography and in the early years following the deployment of new PQC algorithms.

Another focus is on optimizing PQC methods for use on security-critical hardware. Key considerations include limited computing power, restricted memory resources, performance, and secure communication between the identity document and the terminal. The resulting approaches are being integrated as prototypes into a Java Card chip operating system (OS) for identity cards developed by G+D and validated for security, efficiency, and interoperability.

“The quantum era is fundamentally changing the requirements for digital security,” said Gabriel von Mitschke-Collande, Group Chief Digital Officer at G+D. “Anyone who wants to safeguard trust in digital identities tomorrow must lay the technological groundwork today. The feasibility study and proof of concept for the German national ID card, conducted together with Bundesdruckerei, have shown that post-quantum cryptography is already practical for highly secure identity documents. With uPQComing, we are taking the next step, working together with our partners to develop the foundations for the next generation of quantum-safe identities. In doing so, we are also strengthening Europe’s technological sovereignty in a security-critical field that will be of growing importance in the years ahead.”

The uPQComing consortium brings together industry partners as well as research institutes and universities from across Europe. Together, the partners are working to develop innovative security architectures and applications for the post-quantum era.