Introduction
Energy and utility environments combine long asset lifecycles, strict availability requirements and deep IT/OT interdependencies. QSD research examines how post-quantum cryptography can be introduced into critical infrastructure without creating unsafe change, loss of interoperability or unacceptable operational downtime.
2026 Research Context
Energy is one of the sectors where migration timing and asset lifetime collide most sharply. The EU PQC roadmap calls for critical infrastructure to transition as soon as possible and no later than the end of 2030, while OT equipment, protection systems and field devices may remain operational far longer than typical IT platforms. Research therefore needs to address upgradeability, hybrid trust, device identity, remote maintenance and vendor dependency—not only cryptographic performance. QSD’s focus is on transition patterns that preserve availability and safety while creating measurable paths away from quantum-vulnerable public-key dependencies.
Research Focus
- Crypto-agile PKI and device identity for grid and field systems
- Hybrid PQC patterns for constrained and legacy OT environments
- Secure remote access, telemetry and control-channel protection
- Migration dependencies across vendors, gateways, HSMs and lifecycle processes
- Evidence models supporting NIS2 and German critical-infrastructure expectations
Expected Research Outputs
- Sector threat and dependency models
- Reference transition architectures
- OT/SCADA migration playbooks
- Simulation and test scenarios
- Reusable Q-TR sector controls and data models
Standards & Sector Context
NIS2 · German KRITIS context · IEC 62443 concepts · NIST PQC standards
Collaboration Model
QSD seeks joint research with energy operators, grid and utility technology providers, OT-security specialists and applied-research institutions. Preferred collaborations combine access to representative OT/SCADA environments with cryptographic dependency mapping, migration simulation and evidence models that can be reused across critical-infrastructure programmes.