NZ SPOTLIGHT: The Quiet Five Eyes Laggard With One World‑Class PQC Contribution
- Brian Couzens
- 1 day ago
- 1 min read
New Zealand is the only Five Eyes member with no PQC retirement deadline. Conservative and advisory in posture, yet home to one of the globally significant contributors to ML‑DSA. This is NZ’s real PQC position.
Government posture:
NZISM v3.8 (Sept 2024), Section 2.4 requires agencies to inventory cryptographic assets, monitor GCSB updates, and prepare migration plans. No PQC algorithms are approved, and no deadline exists for retiring RSA, DH, ECDH or ECDSA.
GSMA’s 2025 tracker confirms NZ as the outlier against Australia (2030), UK/Canada (2035), and CNSA 2.0 (2030–2035).
CERT NZ merged into NCSC (July 2024), forming NZ’s single operational cyber security agency.
Academia:
Small footprint, one fact of global weight:
University of Auckland’s Steven Galbraith and Shi Bai contributed directly to CRYSTALS‑Dilithium → ML‑DSA (FIPS 204), a core NIST‑standardised algorithm recommended by ASD, NSA, UK NCSC and Canada CSE.
MBIE funds a NZ–Australia PQC collaboration involving Galbraith.
Wellington’s cryptography sits at course level; its research group focuses on network security and deception.
Canterbury contributes via consortium membership (NZ Quantum Hub, Quantum Technologies Aotearoa).
Otago is NZ’s strongest quantum‑information physics institution.
Industry:
ANZ runs an active post‑quantum encryption programme.
RBNZ is building a full cryptographic asset inventory and pursuing crypto‑agility for rapid PQC migration.
No confirmed PQC activity at Spark, One NZ or 2degrees.
Cloud‑heavy enterprises will likely follow AWS, Azure and Google PQC roadmaps — an inference, not a sourced fact.
Bottom line:
Conservative, reactive and deadline‑silent — but holding one PQC contribution of genuine global significance.
#PostQuantumCryptography #PQC #FiveEyes #NewZealand #CyberSecurity #QuantumComputing #NZISM #MLDSA #CryptoAgility #NationalSecurity
Comments