BTQ Technologies and ITCEN PNS have agreed to deploy post-quantum cryptography and quantum-safe authentication across South Korea's financial, public-sector, and enterprise IT infrastructure, targeting regulatory compliance and future cryptographic threats
South Korea is moving to address the risks posed by future quantum computers to digital security by beginning the integration of post-quantum cryptography (PQC) and quantum-safe authentication into its national IT infrastructure. BTQ Technologies Corp. and ITCEN PNS, a subsidiary of ITCENGLOBAL, have signed a memorandum of understanding to collaborate on deploying these security solutions across financial networks, public-sector systems, and enterprise platforms. The agreement aims to align with evolving regulatory requirements and anticipated cryptographic vulnerabilities as quantum computing advances.
Technical Milestones and Standards
ITCEN PNS has achieved several technical and regulatory milestones that position it to support the transition to post-quantum security. In July 2026, the company secured validation under Korea's National Cryptographic Module Validation Program (KCMVP) for a hybrid cryptographic module. This module combines classical public-key algorithms with PQC algorithms standardized by the US National Institute of Standards and Technology (NIST), including ML-KEM for key encapsulation. KCMVP validation is a mandatory requirement for supplying encryption solutions to public institutions in South Korea, ensuring that cryptographic modules meet national security standards.
Deployment Across Critical Sectors
The collaboration will focus on integrating BTQ's post-quantum software algorithms and hardware-rooted security architectures into a range of critical domains. These include financial transaction networks, digital identity frameworks, biometric authentication platforms, and public-sector cloud infrastructure. ITCEN PNS, formerly known as Secucen, already supplies biometric authentication and digital signature solutions to major Korean banks and insurers, providing a foundation for the adoption of quantum-resistant protocols. The company also participates in national KPQC (Korean Post-Quantum Cryptography) standardization efforts and has led pilot deployments of Zero Trust security models in commercial banking environments, in partnership with the Korea Internet & Security Agency (KISA).
Commercial and Regulatory Context
ITCENGLOBAL, the parent company of ITCEN PNS, is one of South Korea's largest IT services conglomerates, operating around 20 subsidiaries and reporting consolidated revenues of KRW 8.9 trillion (approximately $6.0 billion USD) for fiscal year 2025. The scale of its operations provides a significant channel for the deployment of new cryptographic standards. The agreement with BTQ Technologies is led by BTQ CEO and Chairman Olivier Roussy Newton and ITCEN PNS CEO Won-gyu Park, and is intended to connect BTQ's cryptographic intellectual property directly into national deployment projects. This move follows a broader trend of regional quantum technology initiatives, such as the recent launch of a quantum startup hub in Andhra Pradesh, which also targets integration with national and global quantum ecosystems (see coverage of quantum startup hubs in India).
Remaining Challenges and Next Steps
While the agreement establishes a commercial and technical framework for post-quantum security integration, several challenges remain before these systems can be considered fully deployed and effective. The transition to PQC requires not only the adoption of new algorithms but also the replacement or upgrade of legacy systems, careful management of interoperability, and ongoing evaluation of side-channel and implementation vulnerabilities. The effectiveness of hybrid cryptographic modules depends on both the security of the PQC algorithms and the robustness of their integration with existing infrastructure. Independent verification of large-scale deployments and continuous monitoring for new attack vectors will be essential as quantum computing capabilities evolve.
Post-quantum cryptography refers to cryptographic algorithms designed to remain secure against attacks from both classical and quantum computers. Unlike quantum key distribution, which relies on quantum physical principles for security, PQC algorithms are implemented on conventional hardware and are intended as drop-in replacements for current public-key systems. The transition to PQC is driven by the anticipated ability of future fault-tolerant quantum computers to break widely used public-key encryption schemes, such as RSA and elliptic-curve cryptography. Standardization efforts, including those led by NIST and national agencies like KCMVP, focus on selecting algorithms that balance security, performance, and implementation resilience. However, the migration to PQC is a complex process that requires careful engineering, thorough testing, and ongoing adaptation to emerging threats.
