October 30 2025 -- As the era of quantum computing approaches, traditional cryptographic algorithms such as RSA will no longer provide adequate protection and need to be replaced by Post-Quantum Cryptography or PQ/T Hybrid schemes. As a consequence, the secure boot process, the cornerstone of modern cybersecurity, ensuring that only trusted software runs on a device, becomes vulnerable as well.

The EU-funded FORTRESS project is set to develop a robust, scalable solution that guarantees the same high level of trust in the post-quantum era. The consortium includes Eurescom, PQShield, CyberHive, Codasip, eShard and Universität der Bundeswehr München. The project recently kicked-off with its first plenary in Heidelberg.

With digital systems increasingly connected to cloud environments, securing the entire chain—from hardware endpoints to cloud services—has become essential. However, the advent of quantum computing and Shor’s algorithm threatens to render many existing cryptographic schemes obsolete. Secure boot protects devices by validating code integrity through cryptographic signatures—upholding the Confidentiality, Integrity, and Availability (CIA) triad.

FORTRESS responds by advancing Post-Quantum/Traditional (PQ/T) hybrid cryptographic models that combine quantum-resistant and conventional algorithms. This hybrid approach ensures continuity during the transition while strengthening resilience. The project will deliver a comprehensive suite of tools, technologies, and methodologies to support the secure integration of post-quantum mechanisms across embedded systems, edge devices, and Critical National Infrastructure (CNI).

Key outcomes will include a framework for evaluating quantum-safe secure boot mechanisms, PQ/T hybrid cryptographic cores optimized for efficiency and side-channel resistance, and reference implementations with performance baselines and compliance checklists.

By aligning with leading global initiatives from ETSI, CISA, and NCSC, FORTRESS ensures technical excellence and policy coherence. The project’s open, collaborative approach will empower industry, academia, and public-sector stakeholders to enhance their security infrastructure, mitigate emerging risks, and maintain Europe’s leadership in digital trust and cyber resilience in the quantum age.

VP of Product, Dr Axel Poschmann says “The goal of FORTRESS is simple: to secure the entire quantum-safe secure boot chain. At PQShield, we are actively developing open-source benchmarking tools and delivering PQ/T hybrid cryptographic cores, integrating current and post-quantum algorithms, all built for efficiency and side-channel resistance. We are delighted to be a part of this important FORTRESS EU project”.