Germany pioneers quantum-resistant ID cards for digital security

Germany has completed preparatory work to introduce quantum-resistant cryptography for its next generation of ID cards. The development, which involves Bundesdruckerei, Giesecke+Devrient (G+D), the Federal Office for Information Security (BSI) and Infineon, establishes a new benchmark for digital identity security in anticipation of advances in quantum computing.

Quantum threat

Quantum computers, unlike traditional computers, are expected to be capable of quickly solving mathematical problems that underpin current cryptographic methods. This has raised concerns among cybersecurity experts about the long-term security of sensitive personal data, particularly in government-issued identification documents that remain valid for a decade or more. The European Union's roadmap calls for the adoption of post-quantum cryptography (PQC) in critical and high-risk applications by 2030.

Technical foundation

Bundesdruckerei and G+D, in collaboration with the BSI, have developed a demonstrator for a quantum-secure ID card using specialised chips from Infineon. The technical groundwork enables ID card chips to implement hybrid cryptography, combining conventional and post-quantum algorithms. This approach is consistent with guidance from international security authorities and prepares Germany for a staged transition to full quantum-secure technology on national identity documents.

Implementation approach

The transition to quantum-secure ID cards will be conducted in two phases. The initial phase will deploy a quantum-resistant digital signature scheme to secure personal data against forgery. In the subsequent phase, the plan is to move entirely to cryptographic algorithms considered secure against quantum computer attacks. This dual-layered method aims to ensure ongoing protection of ID cards over their standard ten-year validity period.

Industry perspectives

Dr. Kim Nguyen, Senior Vice President of Innovation at Bundesdruckerei, commented on the significance of the achievement:

"Bundesdruckerei and G+D are the first in Germany to demonstrate that highly secure, quantum-resistant cryptography, covering both encryption and authentication, can be implemented on ID chips. This marks a decisive step toward ensuring the future security of digital identities," said Dr. Kim Nguyen, Senior Vice President of Innovation, Bundesdruckerei.

Gabriel von Mitschke-Collande, Member of the Management Board and Group CDO at G+D, reflected on the growing urgency of addressing quantum computing risks:

"The question is no longer whether quantum computers capable of breaking current cryptographic methods will exist, but when this so-called Q-Day will arrive. Companies are already exploring quantum computing in areas such as materials science and pharmaceutical research. We must act now to protect our digital infrastructure. The transition to quantum-resistant encryption is not optional - it's essential. That's why we're proud to have charted a path with Bundesdruckerei that combines the innovative potential of quantum computing with the right security technology," said von Mitschke-Collande.

Technical challenges

Integrating PQC into ID card chips presents notable engineering challenges due to the resource-intensive nature of post-quantum cryptographic algorithms. The demonstration solution uses new Infineon chip designs optimised for fast and resistant software implementation, minimising the computational overhead without compromising security.

Official outlook

Claudia Plattner, President of the BSI, outlined the importance of early action:

"Equipping ID card chips with post-quantum cryptography is essential, as we must assume that by 2030, quantum computers will be capable of breaking today's cryptographic algorithms. By then, governments must be ready to issue quantum-secure ID cards. Germany can be proud to take a pioneering role in protecting the future security of sovereign documents," said Plattner.