At the GovTech4All Café, participants were introduced to the innovative work of Pilot 1, which is developing a reusable Security Framework for quantum-safe cross-border data exchange in the public sector.
Pilot 1 – led by LANTIK, in close collaboration with GRNET and DINUM – is exploring how to secure sensitive public data in an era where quantum computing is no longer a distant concept but an emerging threat. This was the first time the pilot was presented in a GovTech4All Café.
A future-proof approach to cross-border interoperability
The ambition of Pilot 1 is to develop a post-quantum-ready security framework that can support the safe exchange of information between European public administrations. The pilot’s technical foundation is built on two core cryptographic technologies:
- Post-Quantum Cryptography (PQC), designed to resist future attacks from quantum computers;
- Fully Homomorphic Encryption (FHE), which allows encrypted data to be processed without the need of being decrypted first (which, by the way, is quantum-safe by design).
These technologies are integrated into a Security Framework that is flexible, reusable and open source. The framework can be deployed via Docker and accessed through APIs, making it compatible with a wide range of digital public services.
A practical use case: Skills data exchange
The pilot’s proof of concept is focused on a skills use case involving student mobility between France and Greece. When a French student applies to a Greek university, the applicant can retrieve verified academic records directly from the source and redirect them to the receiving institution, without manual uploads by the student.
The information exchange is based on the European initiative Once-Only Technical System (OOTS) and strengthened through the quantum-safe Security Framework, ensuring data confidentiality, authenticity and resilience.
Preparing for the quantum era
The café featured a compelling presentation by Gorka Oteiza (LANTIK), who provided an accessible introduction to quantum technologies: computing, cybersecurity, and sensorics/metrology, focusing then on cryptography and its associated risks. The message was clear: while quantum computers are still under development, it is just a question of time that their ability to break today’s encryption algorithms is widely available, making post-quantum cryptography preparation urgent.
To address this, the pilot is using cryptographic algorithms that have been recently standardized by the international organism NIST and are now being integrated into various open-source libraries, such as ‘Open Quantum Safe - liboqs’ and ‘OpenFHE’ – both used in the Security Framework developed in Pilot 1.
From pilot to broader adoption
Pilot 1 is nearing completion and will conclude in mid-2025. However, the work will continue in SGA2, where the Security Framework will be reused in Pilot 7 and Pilot 8. These new pilots will explore additional use cases, helping to validate and further develop the framework.
The goal is to support interoperable, secure, and future-ready digital public services across the EU.
From science fiction to public service innovation
The café concluded with an engaging discussion among participants, who reflected on the strategic importance of quantum-safe encryption technologies, the implications for interoperability, and the practicalities of adoption in public administration.
As one participant remarked: “It sounds like science fiction – but it’s already happening.”
---------
This blog post captures the key takeaways from our latest GovTech4All Café, where the focus was on post-quantum cryptography, digital resilience, and the importance of preparing public services for the technologies of tomorrow. Gorka Oteiza from LANTIK guided us through the technical breakthroughs of Pilot 1, highlighting how governments can build secure, interoperable infrastructures that stand the test of time – and computation.
As Europe looks ahead to the quantum era, initiatives like GovTech4All are showcasing how open collaboration, technological foresight and shared frameworks can support long-term trust in digital public services. Read on to discover the challenges, use cases and innovations shaping the next generation of secure cross-border interoperability.