Beyond NIST: Why European Organisations Must Understand ETSI for Post-Quantum Cryptography
- Brian Couzens
- Jul 25
- 3 min read
When organisations begin planning their post-quantum cryptography (PQC) journey, the conversation almost always starts with NIST.
That is entirely understandable. NIST has led the global standardisation effort for quantum-resistant cryptographic algorithms, publishing FIPS 203 (ML-KEM), FIPS 204 (ML-DSA), FIPS 205 (SLH-DSA) and FIPS 206 (FN-DSA). These standards provide the mathematical foundation for the next generation of public-key cryptography.
For many organisations, however, that is only half of the story.
If you operate within Europe, provide digital trust services, or supply European public-sector organisations, implementing the correct algorithms is only one part of the challenge. You must also demonstrate how those algorithms align with the European standards and regulatory frameworks that govern their use.
That is where ETSI becomes essential.
NIST and ETSI Perform Different Roles
One of the biggest misconceptions surrounding PQC migration is the assumption that NIST alone provides everything needed for a successful transition.
It does not.
NIST defines the algorithms, security levels and technical parameters that underpin post-quantum cryptography.
ETSI takes those technical foundations and develops standards that support their practical use across European trust services, communications infrastructure and regulatory conformity.
Rather than competing with one another, the two organisations perform complementary functions. One establishes the cryptographic primitives. The other provides guidance for deploying those primitives within a European operational and regulatory context.
Understanding this distinction is critical for security leaders, enterprise architects and governance teams responsible for planning long-term cryptographic transformation.
Three ETSI Standards Worth Understanding
The executive briefing focuses on three ETSI publications that together provide a practical framework for organisations preparing for post-quantum migration.
ETSI TR 103 619 provides guidance on migration strategy and risk assessment. It encourages organisations to identify cryptographic assets, understand where public-key cryptography exists throughout the estate, and determine migration urgency using concepts such as the Mosca Inequality.
ETSI TS 119 312 defines the cryptographic algorithm registry used within European trust services. It plays an important role in supporting qualified electronic signatures, timestamps, seals and other services operating under the eIDAS framework.
ETSI TS 103 744 addresses hybrid key establishment for TLS, providing guidance for combining classical and post-quantum key exchange mechanisms during the transition period.
Each standard addresses a different layer of the migration challenge, from governance and planning through to trust services and transport security.
Migration Is No Longer Just a Technical Exercise
For many organisations, post-quantum migration has traditionally been viewed as an infrastructure programme.
In reality, it has become a governance challenge.
Questions such as these are becoming increasingly important:
Where is public-key cryptography used throughout the organisation?
Which business services depend upon it?
Which assets require long-term confidentiality?
How will cryptographic changes be evidenced during audits?
How can organisations demonstrate ongoing control as standards continue to evolve?
Answering these questions requires considerably more than replacing one algorithm with another.
Successful migration demands visibility, governance, asset discovery, risk prioritisation and continuous operational assurance.
Hybrid Deployment Provides a Practical Transition Path
Few organisations will replace every cryptographic system overnight.
Hybrid approaches allow classical and post-quantum mechanisms to operate together while infrastructure, applications and supporting ecosystems mature.
This provides an opportunity to reduce exposure to Harvest Now, Decrypt Later attacks without requiring immediate wholesale replacement of existing environments.
Like every technology transition, however, hybrid deployment introduces its own interoperability and operational considerations that must be planned carefully.
Procurement and Compliance Matter
Another theme explored in the briefing is the importance of referencing multiple standards when developing technical specifications and procurement documentation.
NIST standards provide the technical definition of approved algorithms.
ETSI standards provide guidance relevant to European deployment.
Current IETF work supports protocol interoperability.
Taken together, these sources provide a stronger foundation for organisations operating internationally than relying upon a single standards body alone.
Cryptographic Agility Is the Long-Term Objective
The post-quantum transition is not a one-time migration project.
Cryptographic standards will continue to evolve.
Algorithms will mature.
Regulatory expectations will change.
New vulnerabilities will emerge.
Organisations that treat PQC as a single technology refresh are likely to face repeated disruption.
Those that invest in cryptographic agility, governance and continuous visibility will be better positioned to respond as the landscape develops.
Final Thoughts
The objective of this executive briefing was not to produce another highly technical paper.
Instead, it was designed to explain how the technical work performed by NIST connects with the European standards developed by ETSI, and why both are necessary when planning post-quantum migration.
Understanding the algorithms is essential.
Understanding how they fit into governance, trust services and regulatory conformity is becoming equally important.
For organisations operating in Europe, or doing business with European partners, that distinction may prove to be one of the defining factors in a successful post-quantum transition.
Comments