Guest Post: Inside Africa’s Coordinated Race to Secure a Post-Quantum Future

Guest Post by By Somtochukwu Igwegbe

More than two trillion dollars moved through mobile money worldwide in 2025, and roughly two-thirds of that value flowed through sub-Saharan Africa, according to GSMA’s State of the Industry Report on Mobile Money 2026. For a fifth of adults in the region, a mobile money account is the only financial account they will ever hold. Behind every transfer sits ordinary public-key cryptography, the same RSA and elliptic-curve math that a sufficiently powerful quantum computer would eventually break.

That threat hasn’t arrived yet, but data doesn’t need it to arrive today to be at risk. Encrypted traffic captured now can be stored and decrypted later, once the right hardware exists, a problem cryptographers call “harvest now, decrypt later.” The White House’s June 2026 executive order on post-quantum migration cites this same risk as the reason federal agencies can no longer treat the transition as a distant deadline. For identity records, health data, and financial archives that need to stay confidential for a decade or more, the clock is already running.

A Room full of Cryptographers, Arguing About Everything but Cryptography

On June 26, the Africa Quantum Consortium (AQC), the pan-African body founded by Farai Mazhandu to coordinate the continent’s quantum strategy, convened a roundtable titled “Securing Africa’s Digital Backbone”. The session drew registrations from more than twenty countries, with more sign-ups in the final day than in the three months prior. In the room: Professor Çetin Kaya Koç, founder of the field’s leading cryptographic hardware conference, and Michael Osborne, who has led IBM’s quantum-safe cryptography effort since 2018, alongside African bank technologists, regulators, and students.

Asked where an African institution should start, panelists kept giving an answer that had little to do with cryptography itself. “There’s not enough budget in the world to make everything we have today quantum safe,” Osborne told the room. Two decades into building IBM’s cryptography practice, he said his job now consists almost entirely of business problems and organizational change management. The hardest part of migration, in his experience, is rarely the math. More often, nobody inside an institution knows where its cryptography actually lives.

Aditya Koranga, who chairs the technical advisory committee of the Post-Quantum Cryptography Alliance, made a similar point from a different vantage point. On live bank migrations across Southeast Asia, he said, “nobody knew who to point us to.” No single team owned a map of where the organization’s cryptography actually sat.

Four days before the roundtable, the White House had signed an executive order tying post-quantum migration deadlines to federal procurement, using the purchase order rather than a research mandate as the lever to bring vendors and contractors into compliance. The African practitioners in that room reached a similar conclusion independently, for a structural reason: because so much of Africa’s digital backbone is bought rather than built, procurement contracts are where the migration will actually be won or lost. Professor Koç put the vendor risk plainly. “Companies want to sell, sell, sell, and you have to be very careful, because you will get the blame for purchasing the wrong equipment,” he said.

Building the Framework Instead of Waiting for One

That insight did not stay in the room. AQC has since published “Securing Africa’s Digital Backbone,” a practitioner-facing guide that translates NIST’s post-quantum standards, the ML-KEM and ML-DSA algorithms finalized in August 2024, into concrete guidance for African central banks, mobile money operators, telecoms, and digital identity authorities. The guide does not simply restate NIST or GSMA guidance. It covers ground those documents leave out, addressing constraints particular to the region: SIM cards without enough memory to hold new post-quantum keys, rural agent terminals that cannot absorb the latency of a heavier handshake, and hardware security modules waiting on firmware nobody has written yet.

That same instinct for building rather than importing runs through the wider organization behind the guide. AQC’s November 2025 white paper, “State of Quantum Science and Technology in Africa,” frames the continental strategy around what it calls a “continental quantum commons,” pooling resources across the continent’s countries rather than duplicating fragmented national programs, an approach the authors argue turns Africa’s late entry into an advantage rather than a liability. South Africa’s national quantum initiative, SA QuTI, already coordinates several universities under a shared government mandate. AIMS Rwanda’s Quantum Leap Africa trains graduate students in quantum information science. University hubs in Egypt, Ghana, Morocco, and Tunisia are standing up master’s programs and research groups of their own. AQC’s newer coordinating body for communications and security, AQCSA, exists to keep these efforts from working in isolation, sharing inventory tooling, training, and a common negotiating position before international standards bodies finish writing the rules.

Why this Matters Beyond Africa

That is the quieter version of this story. A region often treated as a downstream recipient of global technology standards is instead trying to help write some of them. Whether it succeeds will be decided less by cryptographers than by the procurement officers and regulators the AQC roundtable kept returning to: the people who will decide, contract by contract, whether Africa enters the post-quantum era on terms it helped set. AQC formally launched in August 2025, and this roundtable is the clearest sign yet of what that launch was meant to build toward.

About Author

Somtochukwu Igwegbe is a Research & Development member at Quantum Africa and African Quantum Consortium Correspondent. His work focuses on quantum computing, post-quantum cryptography, and the growth of Africa’s quantum ecosystem. He writes on emerging quantum technologies, digital sovereignty, and the intersection of science, cybersecurity, and public policy across the continent.