Secure PQC implementations, Cryptanalysis and Post-quantum Digital Trust

The grant opportunity is part of the Horizon Europe Research and Innovation Action, specifically titled "Secure PQC implementations, Cryptanalysis and Post-quantum Digital Trust" under the HORIZON-CL3-2027-02-CS-ECCC-03 topic. It will open for applications on March 2, 2027, and the deadline for submission is September 15, 2027. The total budget for this topic is €19 million, with an expected allocation of funding ranging from €3 million to €4 million per project, targeting approximately three grants.

Eligible applicants must be legal entities established in EU Member States and Associated Countries; however, entities controlled by non-eligible countries are not allowed to participate. The funding mechanism will be a lump sum grant, simplifying the allocation of resources related to project costs.

The emphasis of the call is on enhancing cybersecurity in the post-quantum era, with a particular focus on Post-Quantum Cryptography (PQC). Key research areas include preventing implementation attacks, conducting cryptanalysis, and establishing robust digital trust systems. Proposals should aim to create solutions that guard against sophisticated threats empowered by advancements in AI and quantum computing, alongside implementing security measures for electronic identities and digital authentication.

The call highlights the need for practical implementations and technological advancements in various aspects, including quantum hardness analysis and the development of protocols for digital trust that are resistant to quantum attacks. Projects are expected to be at the research and development stage and should contribute to advancing the knowledge and solutions necessary to tackle emerging cybersecurity challenges.

The application process is single-stage, requiring complete proposals to be submitted without an initial submission of concept papers. The success rates for funding are not explicitly provided but typically hover around 10 to 39% for Horizon Europe actions, given the competitive nature of the cybersecurity sector.

There is no specific co-funding requirement stated, although additional funding sources may be permitted. Applicants are encouraged to engage with support mechanisms such as National Cybersecurity Coordination Centres and the European Cybersecurity Competence Centre for guidance throughout the application process.

Overall, this initiative presents a significant opportunity to advance European cybersecurity strategies in light of the increasing threats posed by quantum computing, aiming to secure critical digital infrastructures and develop cutting-edge cryptographic solutions.

This is a Horizon Europe call for proposals focusing on Secure PQC (Post-Quantum Cryptography) implementations, Cryptanalysis, and Post-quantum Digital Trust, specifically under the HORIZON-CL3-2027-02-CS-ECCC-03 topic. It is a HORIZON Research and Innovation Action (HORIZON-RIA) with a single-stage deadline model. The planned opening date is March 2, 2027, and the deadline is September 15, 2027, at 17:00:00 Brussels time. The call falls under the Horizon Europe Programme, managed indirectly by the ECCC (European Cybersecurity Competence Centre).

The expected outcomes of proposals should contribute to one or more of the following: practical robust implementations of PQC schemes that can withstand implementation attacks (side-channel, fault, combined), design of automated tools for security evaluation of PQC implementations, comprehensive guidelines for countermeasures, advances in understanding quantum hardness of mathematical problem classes, new quantum algorithms, improved quantum programming and implementation, security validation methods, design of post-quantum schemes with improved security against quantum and AI-based attacks, and post-quantum schemes and protocols to support privacy-friendly applications and services, including secure and private use of electronic identities, design of new digital signatures, key encapsulation mechanisms, and new verification protocols.

The scope of the call emphasizes securing PQC algorithm implementations against implementation attacks, which may be amplified by deep learning. It also highlights the need for new approaches to balance security and performance, using formal verification tools and methodologies. Security assessments of PQC systems, considering the impact of new quantum algorithms or optimizations combined with AI, are crucial. Another key research area is digital trust in the post-quantum era, requiring the transformation of secure identities, data protection, access to essential services, and applications into trusted and reliable solutions using new post-quantum schemes and advanced building blocks for privacy-enhancing protocols.

Proposals should address one of the following technology areas: Development of solutions to prevent implementation attacks, balancing security, performance and cost; research in new attacks, including AI-powered ones, and/or combination of attacks, to inform secure design; creation of testing frameworks for automated security evaluations; improvement of formal verification methodologies. Quantum hardness analysis, via the study of the impact of new quantum algorithms or improvement of existing quantum algorithm implementations as well as the impact of AI-supported quantum attacks; analysis of cryptanalysis results; design of new post-quantum schemes using the information of the advances achieved/ fine-tuning of parameters sets. Design of quantum-resistant schemes and protocols supporting the field of privacy-friendly applications and services, including electronic identities, verification protocols and pseudonymous access options, protocols for attestation and anonymous attestation, for real world scenarios, via the design of new digital signature schemes and key encapsulation mechanisms, design of advanced cryptographic schemes, and usage of existing schemes in new protocols, for post-quantum digital identity and digital trust systems.

The general conditions for admissibility include proposal page limits and layout as described in Annex A and Annex E of the Horizon Europe Work Programme General Annexes and Part B of the Application Form. Eligible countries are described in Annex B of the Work Programme General Annexes, with specific provisions for non-EU/non-Associated Countries outlined in the Horizon Europe Programme Guide. Participation is limited to legal entities established in Member States and Associated Countries to safeguard the Union's strategic assets, interests, autonomy, and security. Financial and operational capacity and exclusion are described in Annex C of the Work Programme General Annexes. Evaluation and award criteria, scoring, and thresholds are detailed in Annex D, while submission and evaluation processes are in Annex F and the Online Manual. The indicative timeline for evaluation and grant agreement is also in Annex F. Eligible costs will take the form of a lump sum as defined in the Decision of 7 July 2021.

Specific conditions are described in the specific topic of the Work Programme. Application form templates are available in the Submission System, with standard application forms (HE RIA, IA). Evaluation form templates will be used with necessary adaptations, including standard evaluation forms (HE RIA, IA). Guidance is provided in the HE Programme Guide, Lump Sum MGA, call-specific instructions, detailed budget table (HE LS), Guidance: "Lump sums - what do I need to know?", Ownership Control Declaration, and Information on Security issues (Security section).

Additional documents include the HE Main Work Programme 2026-2027 – 1. General Introduction, HE Main Work Programme 2026-2027 – 6. Civil Security for Society, HE Main Work Programme 2026-2027 – 15. General Annexes, HE Programme Guide, HE Framework Programme 2021/695, HE Specific Programme Decision 2021/764, EU Financial Regulation 2024/2509, Decision authorising the use of lump sum contributions under the Horizon Europe Programme, Rules for Legal Entity Validation, LEAR Appointment and Financial Capacity Assessment, EU Grants AGA — Annotated Model Grant Agreement, Funding & Tenders Portal Online Manual, Funding & Tenders Portal Terms and Conditions, and Funding & Tenders Portal Privacy Statement.

The budget overview indicates that the HORIZON-CL3-2027-02-CS-ECCC-03 topic has a budget of 19,000,000 EUR for the year 2027, with contributions ranging from 3,000,000 to 4,000,000 EUR and an indicative number of 3 grants.

Partner search announcements are available, and LEARs, Account Administrators, or self-registrants can publish partner requests. The submission system is planned to open on the date stated on the topic header.

For support, applicants are encouraged to contact the National Cybersecurity Coordination Centres (NCC) in their country or the ECCC Applicants Direct Contact Centre.

In summary, this Horizon Europe grant opportunity aims to bolster cybersecurity by focusing on post-quantum cryptography. It seeks to fund research and innovation that will secure digital systems against future quantum computing threats, enhance digital trust, and develop advanced cryptographic solutions. The call encourages projects that address implementation attacks, improve quantum algorithm analysis, and design quantum-resistant schemes for privacy-friendly applications. It is a lump-sum grant, meaning that eligible costs will be reimbursed as a pre-agreed lump sum, and it is open to legal entities from EU Member States and Associated Countries. The call provides a budget of 19 million EUR and aims to fund approximately 3 projects.

Eligible Applicant Types: The eligible applicant types are legal entities established in EU Member States and Associated Countries. Entities established in eligible countries but directly or indirectly controlled by a non-eligible country or entity are not eligible. The specific types of legal entities (e.g., SME, large enterprise, university, research institute) are not explicitly mentioned but are implied to be within the scope of "legal entities."

Funding Type: The funding type is a grant, specifically a HORIZON Lump Sum Grant, under the Horizon Europe Programme. There are two types of actions: HORIZON Research and Innovation Actions (HORIZON-RIA) and HORIZON Innovation Actions (HORIZON-IA).

Consortium Requirement: The information does not explicitly state whether a single applicant or a consortium is required. However, the partner search announcements and the nature of research and innovation actions suggest that consortia are likely to be common and potentially advantageous.

Beneficiary Scope (Geographic Eligibility): The geographic eligibility is limited to legal entities established in EU Member States and Associated Countries. Non-EU/non-Associated Countries may have specific provisions for funding their participants in Horizon Europe projects.

Target Sector: The target sector is cybersecurity, with a focus on securing Post-Quantum Cryptography (PQC) implementations, cryptanalysis, and post-quantum digital trust. Specific areas include:
 1. Development of solutions to prevent implementation attacks, balancing security, performance and cost; research in new attacks, including AI-powered ones, and/or combination of attacks, to inform secure design; creation of testing frameworks for automated security evaluations; improvement of formal verification methodologies.
 2. Quantum hardness analysis, via the study of the impact of new quantum algorithms or improvement of existing quantum algorithm implementations as well as the impact of AI-supported quantum attacks; analysis of cryptanalysis results; design of new post-quantum schemes using the information of the advances achieved/ fine-tuning of parameters sets.
 3. Design of quantum-resistant schemes and protocols supporting the field of privacy-friendly applications and services, including electronic identities, verification protocols and pseudonymous access options, protocols for attestation and anonymous attestation, for real world scenarios, via the design of new digital signature schemes and key encapsulation mechanisms, design of advanced cryptographic schemes, and usage of existing schemes in new protocols, for post-quantum digital identity and digital trust systems.

Mentioned Countries: The 27 EU Member States, Iceland, and Norway are explicitly mentioned as countries with National Cybersecurity Coordination Centres (NCCs). The text also refers to EU Member States and Associated Countries as eligible for participation.

Project Stage: The project stage varies depending on the type of action. HORIZON-RIA (Research and Innovation Actions) implies projects in the research, development, and validation stages. HORIZON-IA (Innovation Actions) suggests projects in the demonstration, and potentially commercialization or scale-up stages.

Funding Amount: The funding amounts vary by topic:
 HORIZON-CL3-2027-02-CS-ECCC-01 (HORIZON-RIA): €4,000,000 to €5,000,000
 HORIZON-CL3-2027-02-CS-ECCC-02 (HORIZON-IA): €3,000,000 to €4,000,000
 HORIZON-CL3-2027-02-CS-ECCC-03 (HORIZON-RIA): €3,000,000 to €4,000,000
 HORIZON-CL3-2027-02-CS-ECCC-04 (HORIZON-RIA): around €4,000,000

Application Type: The application type is an open call with a single-stage submission process.

Nature of Support: Beneficiaries will receive money in the form of a lump sum grant.

Application Stages: The application process is a single-stage process.

Success Rates: The success rates are not explicitly mentioned, but the indicative number of grants for each topic provides some insight. For example, HORIZON-CL3-2027-02-CS-ECCC-01 aims to fund 5 projects out of a likely much larger pool of applicants, suggesting a competitive success rate.

Co-funding Requirement: The information does not explicitly state whether co-funding is required. However, Horizon Europe grants often involve a certain level of co-funding, which might be detailed in the specific call documents or annexes.

Summary: This Horizon Europe call, managed by the ECCC, focuses on bolstering cybersecurity in the post-quantum era. It seeks proposals that enhance the security and robustness of Post-Quantum Cryptography (PQC) implementations, improve digital trust, and develop quantum-resistant schemes for various applications. The call is structured around four main topics, each with a specific budget and scope, ranging from research and innovation actions to innovation actions. Eligible applicants are legal entities from EU Member States and Associated Countries. The funding is provided as lump sum grants, and the application process involves a single-stage submission. Projects should address key technology areas, including preventing implementation attacks, analyzing quantum hardness, and designing quantum-resistant protocols. This initiative aims to secure digital infrastructure and services against future quantum computing threats, ensuring the EU's strategic assets, interests, autonomy, and security.