Project results and personal reflections from our OC#1 winners. From implementation to challenges and impact to PQ-REACT support and selection opportunities.
Decent Cybersecurity s.r.o. story
The quantum computing threat to current cryptographic systems is no longer theoretical—it demands immediate action. Our CRISP-Q project, funded through PQ-REACT Open Call #1, spent five months (January-May 2025) transforming FIPS 203 ML-KEM post-quantum cryptography from academic research into deployable solutions for European critical infrastructure.
What We Accomplished
Algorithm Implementation: We successfully developed three of four planned ML-KEM parameter sets (ML-KEM-512, ML-KEM-768, ML-KEM-1024) with full FIPS 203 compliance, achieving 75% of our implementation target. Comprehensive benchmarking across Intel x86-64, ARM Cortex-A, and ARM Cortex-M platforms provided organizations with essential performance data for deployment decisions. Protocol Integration: Achieved 100% success in targeted integrations, successfully incorporating ML-KEM into TLS 1.3 and SSH 2.0 with hybrid key exchange support. This proves organizations can enhance quantum resilience without fundamental infrastructure changes. Performance Optimization: Systematic optimization delivered 25% performance improvements, 22% memory usage reduction, and 23% energy efficiency gains on battery-powered devices. These results demonstrate quantum-resistant security doesn’t require prohibitive computational costs. Migration Frameworks: Developed comprehensive transition tools including our Hybrid Cryptographic Transition Framework and PQC Migration Utility Toolkit, enabling gradual migration from classical to quantum-resistant cryptography without operational disruption. Industry Engagement: Created eight educational resources and conducted five major industry activities, reaching hundreds of professionals across critical infrastructure sectors and generating concrete adoption interest.
Challenges and Solutions
Resource Constraints: IoT and embedded systems presented severe computational limitations. We overcame this through innovative algorithmic improvements and hardware-specific optimizations, though severely constrained platforms require additional development. Backward Compatibility: Organizations cannot abandon existing infrastructure overnight. Our hybrid implementations combine classical and quantum-resistant algorithms, providing secure transition pathways that maintain operational continuity while building quantum resilience. Knowledge Gap: A significant disconnect exists between theoretical understanding and practical implementation skills. We addressed this through hands-on educational materials and targeted workshops translating complex concepts into actionable guidance.
Key Results
Our deliverables provide immediate value: three validated ML-KEM parameter sets with performance analysis, complete TLS 1.3 and SSH 2.0 integration frameworks, hybrid transition tools for organizational migration, eight educational resources including implementation guides, performance benchmarks proving viability across platforms, and industry partnerships with critical infrastructure operators.
Impact and Future Influence
CRISP-Q advances quantum research by identifying real-world implementation barriers and developing practical solutions. Our performance optimization provides empirical data for future algorithm development, while hybrid implementation approaches pioneer essential transition strategies as quantum threats become imminent. The project contributes to European strategic autonomy in quantum security technologies.
PQ-REACT Support Value
PQ-REACT Open Call #1 support was transformative beyond financial backing. The program provided access to European quantum security experts and critical infrastructure stakeholders impossible to reach independently. The focus on practical implementation aligned with our mission to bridge theory-practice gaps, enabling extensive real-world testing that gives solutions credibility with cautious industry stakeholders.
Most Valuable Selection Aspect
“Being selected for PQ-REACT Open Call #1 was a game-changer for Decent Cybersecurity. It validated our practical approach and opened doors to European critical infrastructure operators serious about quantum resilience. The program positioned us at the forefront of Europe’s quantum security strategy and connected us with a community of innovators sharing our vision of making quantum-resistant security deployable today, not just theoretically possible tomorrow.” – Matej Michalko, Chairman and CEO, Decent Cybersecurity s.r.o. The collaborative environment connected us with complementary projects, creating synergies that enhanced our technical approach and multiplied impact. Most significantly, selection positioned us as contributors to European strategic autonomy in quantum security, enabling participation in policy discussions and standardization activities shaping post-quantum cryptography’s future.
Conclusion
CRISP-Q established foundations for practical post-quantum cryptography deployment across European critical infrastructure. Our frameworks, tools, and partnerships provide stepping stones for organizations beginning quantum-resilience journeys. The quantum threat requires sustained, coordinated action—our work demonstrates that transition to quantum-resistant security is achievable today with appropriate expertise and strategic support. Through projects like CRISP-Q and programs like PQ-REACT, Europe builds capabilities necessary for security and competitiveness in the quantum era.
