Integration of Post-Quantum Cryptography (PQC) algorithms into high-level protocols

The Horizon Europe call for proposals, specifically an Indirectly Managed Action by the European Cybersecurity Competence Centre (ECCC), focuses on integrating Post-Quantum Cryptography (PQC) algorithms into high-level protocols to enhance cybersecurity. This initiative emphasizes the urgent transition from traditional public-key cryptography methods like RSA and ECC to quantum-resistant solutions due to the upcoming threats posed by quantum computing.

Eligible applicants include small and medium-sized enterprises (SMEs), research institutions, universities, and public-private partnerships. Participation is restricted to legal entities from EU Member States, Associated Countries, and OECD countries. The project aims to foster collaboration among diverse actors to ensure that PQC solutions meet real-world security demands.

Funding will be provided as a lump sum, categorized under Research and Innovation Actions (RIA). The total funding amounts vary per specific project topic, ranging from EUR 2 million to EUR 14 million, depending on the complexity and requirements of the individual call. For example, one proposal topic is projected to have a budget of EUR 40 million with contributions of EUR 12 million to EUR 14 million.

The application process consists of a single-stage submission, with an open call set to open on June 12, 2025, and a deadline for submissions on November 12, 2025. Proposals are expected to include the design and implementation of at least one high-level PQC protocol, alongside a security analysis to ensure its effectiveness. Furthermore, these protocols should be submitted to standardization bodies and be compatible with existing legacy systems.

Success rates for such grants typically range from 10% to 39%, though the exact rates for this specific call are not explicitly detailed. Importantly, no co-funding is required, as these grants cover 100% of eligible costs.

The anticipated outcomes of the funded projects include the development of practical PQC solutions that can be deployed in various applications, such as Internet of Things (IoT), cloud services, and automotive systems. The overarching goal is to ensure the security and resilience of European digital infrastructure against both current and future cybersecurity threats.

The scope of the project encompasses the research, implementation, and validation of PQC protocols, aiming to standardize and integrate new cryptographic methods that withstand quantum attacks while maintaining compatibility with existing technologies.

This is a Horizon Europe (HORIZON) call for proposals, specifically an Indirectly Managed Action by the ECCC (HORIZON-CL3-2025-01-IM-01) focusing on the integration of Post-Quantum Cryptography (PQC) algorithms into high-level protocols. The call falls under the HORIZON-RIA (Research and Innovation Actions) funding scheme and utilizes the HORIZON Lump Sum Grant [HORIZON-AG-LS] Model Grant Agreement (MGA).

The call is forthcoming with a single-stage deadline model. The planned opening date is June 12, 2025, and the deadline for submissions is November 12, 2025, at 17:00:00 Brussels time.

The expected outcomes of the proposals should include: Design and implementations of at least one high-level post-quantum cryptography protocol along with a security analysis demonstrating that no security is lost compared to the used building blocks/lower-level protocols (KEMs, signatures, AEAD). Submission of these high-level protocols integrating PQC to standardization bodies and/or submission of the specification and implementation to the respective open source projects. Requirements analysis highlighting roadblocks and needs for development of PQC solutions for missing building blocks for migrating high-level protocols to PQC.

The scope of the call addresses the transition to post-quantum cryptography, which requires changing the uses of most currently deployed public-key cryptography (RSA and ECC). Research and development efforts are providing signature systems and key-exchange mechanisms that are generally accepted to withstand attacks using classical and quantum computers. Efforts are on the way to include these in core Internet protocols such as Transport Layer Security (TLS). While this is an important development, many more protocols need to be modified to be quantum-ready and to ensure backward compatibility with legacy systems. Various application areas, such as Internet of Things, cloud-based applications, and automotive, place constraints on bandwidth or processing time which may prompt different choices than those employed for TLS. Currently used high-level protocols may have components that are specific to Elliptic Curve Cryptography (ECC) or to Rivest-Shamir-Adleman (RSA) or may require additional building blocks next to or in place of signatures and key-exchange mechanisms. While applications that provide authenticity are less urgent to migrate than those for confidentiality, those using embedded hardware such as secure elements, Two-Factor Authentication (2FA) and Multi-Factor Authentication (MFA) using hardware tokens and others have a very slow turnover and need to be replaced by the time large quantum computers exist, thus requiring migrating the design in the near future. Activities should target one or multiple relevant high-level protocols and produce their post-quantum versions. Typically, this can be achieved through combining current and post-quantum solutions for backward compatibility. Atypical solutions with equivalent security are also welcome. Consortia composed by actors of different nature, such as, for example, research institutions, relevant public entities, and industry to ensure that PQC solutions meet real-world security demands and are robustly tested across various applications are also welcome.

The general conditions for this call include: Admissibility Conditions: Proposal page limit and layout are described in Annex A and Annex E of the Horizon Europe Work Programme General Annexes and in Part B of the Application Form available in the Submission System. Eligible Countries are described in Annex B of the Work Programme General Annexes, with specific provisions for non-EU/non-Associated Countries outlined in the Horizon Europe Programme Guide. Other Eligible Conditions: Participation is limited to legal entities established in Member States and Associated Countries and OECD countries to safeguard the Union’s strategic assets, interests, autonomy, and security. Entities directly or indirectly controlled by a non-eligible country or entity are not allowed to participate. Financial and operational capacity and exclusion are described in Annex C of the Work Programme General Annexes. Evaluation and award criteria, scoring, and thresholds are described in Annex D of the Work Programme General Annexes. Submission and evaluation processes are described in Annex F of the Work Programme General Annexes and the Online Manual. The indicative timeline for evaluation and grant agreement is described in Annex F of the Work Programme General Annexes. Legal and financial set-up of the grants: Eligible costs will take the form of a lump sum as defined in the Decision of 7 July 2021 authorising the use of lump sum contributions under the Horizon Europe Programme and in actions under the Research and Training Programme of the European Atomic Energy Community (2021-2027). This is further described in Annex G of the Work Programme General Annexes. Specific conditions are described in the specific topic of the Work Programme.

Application and evaluation forms and model grant agreement (MGA) information: Application form templates are available in the Submission System, including standard application forms for HE RIA, IA, CSA, RI, PCP, PPI, COFUND, FPA, MSCA DN/PF/SE/COFUND, ERC STG/COG/ADG/POC/SYG, and EIC PATHFINDER CHALLENGES/OPEN/TRANSITION. Evaluation form templates will be used with necessary adaptations, including standard evaluation forms for HE RIA/IA, CSA, PCP/PPI, COFUND, FPA, MSCA, and EIC PATHFINDER CHALLENGES/OPEN/TRANSITION/Accelerator. Guidance documents include the HE Programme Guide, Model Grant Agreements (HE MGA, HE Unit MGA, Lump Sum MGA, Operating Grants MGA, Framework Partnership Agreement FPA), call-specific instructions, detailed budget table (HE LS), information on financial support to third parties (HE), information on clinical studies (HE), and guidance on lump sums. Additional documents include the HE Main Work Programme 2023–2025 (General Introduction, Marie Skłodowska-Curie Actions, Research Infrastructures, Health, Culture/creativity/inclusive society, Civil Security for Society, Digital/Industry/Space, Climate/Energy/Mobility, Food/Bioeconomy/Natural Resources/Agriculture/Environment, European Innovation Ecosystems, Widening participation/strengthening the European Research Area, Missions, General Annexes), HE Programme Guide, HE Framework Programme 2021/695, HE Specific Programme Decision 2021/764, EU Financial Regulation 2024/2509, Decision authorising the use of lump sum contributions, Rules for Legal Entity Validation/LEAR Appointment/Financial Capacity Assessment, EU Grants AGA, Funding & Tenders Portal Online Manual, Funding & Tenders Portal Terms and Conditions, and Funding & Tenders Portal Privacy Statement.

The budget overview for the call in 2025 is as follows: HORIZON-CL3-2025-02-CS-ECCC-01: HORIZON-RIA, 40,000,000 EUR, contributions of 12,000,000 to 14,000,000 EUR, 3 indicative grants. HORIZON-CL3-2025-02-CS-ECCC-02: HORIZON-IA, 23,550,000 EUR, contributions of 4,500,000 to 6,000,000 EUR, 4 indicative grants. HORIZON-CL3-2025-02-CS-ECCC-03: HORIZON-RIA, 11,000,000 EUR, contributions of 3,000,000 to 4,000,000 EUR, 3 indicative grants. HORIZON-CL3-2025-02-CS-ECCC-04: HORIZON-RIA, 4,000,000 EUR, contributions of 2,000,000 to 3,000,000 EUR, 2 indicative grants. HORIZON-CL3-2025-02-CS-ECCC-05: HORIZON-RIA, 6,000,000 EUR, contributions of 2,000,000 to 3,000,000 EUR, 2 indicative grants. HORIZON-CL3-2025-02-CS-ECCC-06: HORIZON-RIA, 6,000,000 EUR, contributions of 2,000,000 to 3,000,000 EUR, 2 indicative grants.

There are 10 partner search announcements available. The submission system is planned to open on the date stated on the topic header. There are 0 topic Q&As found.

This Horizon Europe call aims to bolster cybersecurity by funding research and innovation that integrates post-quantum cryptography into high-level protocols. With the looming threat of quantum computers capable of breaking current encryption methods, this initiative seeks to future-proof digital infrastructure. The call encourages collaborative projects involving research institutions, public entities, and industry to develop and standardize new cryptographic protocols that are secure against both classical and quantum attacks. Successful projects will design, implement, and rigorously test these protocols, contributing to a more secure and resilient digital future for the EU. The funding is provided as a lump sum, and participation is limited to entities from Member States, Associated Countries, and OECD countries, ensuring that the benefits and strategic advantages remain within these regions.

Eligible Applicant Types: The eligible applicant types include research institutions, relevant public entities, and industry. Participation is limited to legal entities established in Member States, Associated Countries, and OECD countries. Entities directly or indirectly controlled by a non-eligible country or entity are not allowed to participate.

Funding Type: The funding type is a grant, specifically HORIZON Research and Innovation Actions (HORIZON-RIA) and HORIZON Innovation Actions (HORIZON-IA) with eligible costs taking the form of a lump sum.

Consortium Requirement: The opportunity welcomes consortia composed of actors of different natures, such as research institutions, relevant public entities, and industry.

Beneficiary Scope (Geographic Eligibility): The geographic eligibility is limited to legal entities established in Member States, Associated Countries, and OECD countries.

Target Sector: The target sector is cybersecurity, specifically focusing on the integration of Post-Quantum Cryptography (PQC) algorithms into high-level protocols. This includes areas like Internet of Things, cloud-based applications, and automotive.

Mentioned Countries: The opportunity mentions Member States, Associated Countries, and OECD countries as eligible regions. It also indirectly mentions non-EU/non-Associated Countries and third countries.

Project Stage: The project stage is focused on research, development, and implementation, with an emphasis on designing, implementing, and analyzing the security of high-level post-quantum cryptography protocols. The projects should aim for submission to standardization bodies and open source projects, indicating a move towards validation and potential commercialization.

Funding Amount: The funding amounts vary depending on the specific topic:
HORIZON-CL3-2025-02-CS-ECCC-01: EUR 12,000,000 to EUR 14,000,000
HORIZON-CL3-2025-02-CS-ECCC-02: EUR 4,500,000 to EUR 6,000,000
HORIZON-CL3-2025-02-CS-ECCC-03: EUR 3,000,000 to EUR 4,000,000
HORIZON-CL3-2025-02-CS-ECCC-04: EUR 2,000,000 to EUR 3,000,000
HORIZON-CL3-2025-02-CS-ECCC-05: EUR 2,000,000 to EUR 3,000,000
HORIZON-CL3-2025-02-CS-ECCC-06: EUR 2,000,000 to EUR 3,000,000

Application Type: The application type is an open call with a single-stage submission process.

Nature of Support: The beneficiaries will receive money in the form of a lump sum grant.

Application Stages: The application process is a single-stage process.

Success Rates: The success rates are not explicitly mentioned, but the indicative number of grants for each topic provides some insight:
HORIZON-CL3-2025-02-CS-ECCC-01: 3 grants
HORIZON-CL3-2025-02-CS-ECCC-02: 4 grants
HORIZON-CL3-2025-02-CS-ECCC-03: 3 grants
HORIZON-CL3-2025-02-CS-ECCC-04: 2 grants
HORIZON-CL3-2025-02-CS-ECCC-05: 2 grants
HORIZON-CL3-2025-02-CS-ECCC-06: 2 grants

Co-funding Requirement: The need for co-funding is not explicitly mentioned.

This Horizon Europe call, managed by the ECCC, focuses on bolstering cybersecurity by integrating post-quantum cryptography (PQC) into high-level protocols. The initiative addresses the urgent need to transition from current cryptographic methods (RSA and ECC) to quantum-resistant solutions, given the increasing threat from quantum computers. The call invites consortia comprising research institutions, public entities, and industry actors to design, implement, and rigorously test PQC solutions across various applications, including IoT, cloud services, and automotive systems. Eligible applicants must be legal entities from EU Member States, Associated Countries, and OECD countries, ensuring the Union's strategic assets and interests are protected. The funding is provided as a lump sum, and the application process involves a single stage. Successful projects are expected to contribute to the development of standardized, open-source PQC protocols, enhancing the security and backward compatibility of critical systems in the face of emerging quantum computing threats. The call aims to foster collaboration and innovation in the cybersecurity sector, ensuring that European digital infrastructure remains resilient and secure.