Australia - Quantum Era Readiness and PQC Transition: 🇦🇺 SPOTLIGHT:

Australia has moved from awareness to structured execution under the Australian Signals Directorate (ASD) and Australian Cyber Security Centre (ACSC) guidance.

It is not the loudest, but it is the most disciplined in the Five Eyes on migration planning.

1. National Mandate: ASD and ACSC’s PQC Transition Framework

The ACSC’s Planning for Post Quantum Cryptography guidance (2022–2025) sets a three stage LATICE based timeline:

Refined transition plan by end 2026

Migration begun on critical and high risk systems by end 2028

Full transition off RSA, DH, ECDH, and ECDSA by end 2030

Embedded in the ISM cryptography guidelines, with ML KEM (FIPS 203) and ML DSA (FIPS 204) as recommended algorithms.

Mandatory for Commonwealth entities under the ISM and PSPF; advisory for private sector operators under the SOCI Act.

2. Operationalisation: Defence and Critical Infrastructure

Execution is coordinated through:

ASD (formerly Defence Signals Directorate, renamed 2013)

Cyber and Infrastructure Security Centre (CISC) within Home Affairs

Both bodies are aligning cryptographic policy and resilience frameworks.

No formalised defence specific PQC pilots are confirmed; testing and migration remain organisation driven under ASD guidance.

3. Regional Signalling: Five Eyes Convergence

Australia’s 2030 completion target is five years tighter than the UK and Canadian 2035 deadlines.

Alignment points:

NSA CNSA 2.0 (full NSS migration 2030–2035)

UK NCSC roadmap 2035

Canada CSE ITSM.40.001 roadmap 2035

Australia is the southern anchor of Five Eyes quantum security coordination, but with a faster clock.

4. Industry Momentum: Academia and Commercial Integration

Active research and industry nodes include:

CSIRO Data61 (Dongxi Liu - hybrid PQC/QKD)

UNSW (Sushmita Ruj - PQC protocols)

Monash University (co developer of the LaV algorithm with Data61)

QuintessenceLabs (Canberra) - qCrypt/qStream integrated with Defence Secure Network and Telstra 400G trial

Sector data shows 45 to 47 percent of banking and telecom respondents have budgeted PQC plans.

5. The Risk Drivers: Why Australia Is Acting Now

Harvest now, decrypt later threat to long term data confidentiality

Defence and intelligence data longevity

Sovereign cloud adoption

Critical infrastructure exposure

Quantum risk is treated as a strategic continuity threat, not a compliance checkbox.

Spotlight Summary

Australia is now the Asia Pacific quantum readiness benchmark because it:

Has a national ASD/ACSC PQC timeline through 2030

Embeds ML KEM and ML DSA in ISM guidance

Coordinates through ASD and CISC

Leads regional Five Eyes convergence with a tighter schedule

Maintains active academic and commercial PQC development

It is structured, disciplined, and execution ready - the region’s most mature PQC posture.

#Quantum #PQC #Cyber #CryptographicAgility #NationalSecurity #ASDGuidance

PQC Discovery Sprint | Sitg-Consulting