Quantum risk in space

No. The Commission published the proposal on 25 June 2025 as COM(2025) 335, a Regulation on the safety, resilience and sustainability of space activities in the Union. Its resilience pillar would bring tailored cybersecurity requirements for EU and non-EU operators providing space services in Europe, scaled by company size and risk profile. The text is being negotiated by the European Parliament and the Council under the ordinary legislative procedure, so the obligations and dates can still change. Build to NIS2 today, which does apply, and track the Space Act text as it moves.

Yes, through the ground segment. Annex I of Directive (EU) 2022/2555 lists space among the sectors of high criticality and defines the entities as operators of ground-based infrastructure, owned, managed and operated by Member States or by private parties, that support the provision of space-based services, excluding providers of public electronic communications networks. Essential and important entities owe the Article 21 risk management measures, which include policies and procedures on the use of cryptography and, where appropriate, encryption. A teleport or mission control centre in the EU should assume it is in scope unless its national transposition says otherwise.

Space Policy Directive 5 of 4 September 2020 sets principles rather than rules. Space systems should be developed and operated using risk-based, cybersecurity-informed engineering; command, control and telemetry links should be protected with effective and validated authentication or encryption designed to remain secure against existing and anticipated threats during the entire mission lifetime; ground systems should be protected; and supply chain risk should be managed. The phrase that matters for quantum is the mission lifetime one. For a spacecraft launched in 2027 the anticipated threats include a cryptographically relevant quantum computer.

Three reasons. The telecommand link is broadcast over radio, so anyone with a dish in the footprint can record it. The keys and authentication scheme were loaded before launch and in most fleets cannot be changed on orbit, so the same material protects the link for 15 years. And the data riding on the link is often someone else's: imagery tasked by a government, traffic from a maritime or aviation customer, telemetry that reveals the health of a national asset. Traffic recorded in 2026 from a GEO spacecraft is still protecting a live mission in 2040.

Sometimes, and the honest answer per spacecraft is the most valuable line in your inventory. Where the on-board cryptographic unit runs in software on a processor with headroom and the mission has a signed firmware update path, a hybrid or post-quantum authentication scheme can be loaded. Where the algorithm is fixed in hardware, or the update itself must be signed with the key you want to retire, it cannot, and the mitigation moves to the ground: key hygiene, re-keying where the protocol allows it, independent encryption of the payload data and monitoring of the command path. Our PQC for Ground-to-Satellite Command and Control course works through both cases on real space-qualified processors.

Not yet enough to build to. CCSDS 355.0-B-2, the Space Data Link Security Protocol of July 2022, provides authentication and encryption of transfer frames at the data link layer, and CCSDS 352.0-B-2 of August 2019 specifies the algorithms: AES in several modes, HMAC, cipher-based authentication and digital signature based authentication. Neither Blue Book names a post-quantum algorithm. The protocol's symmetric core is in good shape against a quantum adversary with AES-256; the exposure sits in how keys are established, distributed and refreshed, and in any public-key signature used for authentication or firmware. Design new missions so the key management layer can change without touching the frame protocol.

It is part of Europe's answer for key distribution between fixed sites, not a substitute for post-quantum algorithms. EuroQCI pairs a terrestrial fibre segment with a space segment, and Eagle-1, developed by ESA and a consortium led by SES Techcom, is due to launch in late 2026 or early 2027 for three years of in-orbit validation. QKD can establish keys over an optical link to a ground station; it does not authenticate a telecommand, sign firmware or protect a customer's VPN over your capacity. NATO's October 2026 position paper and the European agencies' joint statement both say QKD does not yet meet the bar for classified traffic. Migrate the algorithms first and treat space QKD as a future key source for specific high-assurance links.

Directly, only if you own or operate a US national security system. In practice it reaches you through the customer: a hosted payload, a ground station or a leased link that serves a national security system has to meet the CNSA 2.0 dates for its category, and those customers are starting to write it into contracts. Software and firmware signing should already prefer CNSA 2.0, with exclusive use by 2030, and new national security system acquisitions must comply from 1 January 2027. If a defence or intelligence customer is anywhere in your order book, assume the question is coming.

NATO's Quantum Technologies Strategy, summarised in January 2024, commits the Alliance to the transition of its cryptographic systems to quantum-safe cryptography and to research into quantum-safe communications across air, space, cyber, land and maritime domains. It also names quantum sensing for positioning, navigation and timing without GNSS. The Quantum Technology Roadmap of 29 September 2026 adds dates: an industry readiness study for quantum-resistant cryptography in Q2 2027, a refreshed action plan on the quantum threat to cryptography in Q3 2027, a Quantum Zero Beacon pilot between NATO HQ and SHAPE in Q4 2027 and an Alliance quantum standards roadmap by Q3 2029. For a SATCOM provider serving allied governments, those are the dates your customers are planning to.

With a cryptographic inventory across all three segments: on-board cryptographic units and key loading, the ground segment, and the services you deliver; a map of how long each data type stays sensitive against the algorithms protecting it; a line per spacecraft saying whether its cryptography can change on orbit; and PQC roadmaps requested from every bus, payload, ground software and crypto module supplier. Those four give the board or mission assurance board the evidence to set priorities before the next design freeze.

Everything on this page. The two-minute readiness check scores your space programme and routes you to the right next step. The free tools, including the SATCOM and C2 Cryptographic Readiness Assessor and the HNDL Risk Calculator, run in your browser with no registration. The weekly peer call runs every Tuesday at 15:00 CET and is open to anyone. Sample lectures from the 170-plus expert library are linked above, and the page is reviewed as the mandates change; the date beside the key facts is the last check.

It depends on the role. Directors, programme boards and mission assurance boards start with the Certified Quantum Business Professional bootcamp, about 22 hours self-paced across ten modules. Security, ground segment and mission operations teams take Introduction to Quantum Cyber Security, four to five hours online with a QSECDEF certificate. Ground segment architects and mission assurance leads take PQC for Ground-to-Satellite Command and Control, the sector course for telecommand, telemetry and control links, with Cryptographic Resilience for Space System Mission Architecture and Quantum-Secure Satellite Telecoms as the next steps. Whoever will run the migration takes CPQCPM, the Certified Post Quantum Cryptography Programme Manager course: ten hours live online over five weeks, with the next public cohort in January 2027.

Yes. QSECDEF runs private CPQCPM cohorts for a single organisation, live online or in person, and private deliveries of the sector courses listed under Equip your people for your ground segment and mission assurance teams. Board and leadership workshops are built on your own exposure and obligations and end with an agreed position on quantum risk. Use the contact button in the For your organisation section and tell us your timeline.

Through the QSECDEF Expert Members directory. Every listed member has been vetted, has signed the Members' Charter and has presented to the community. You can filter by consulting and services, technology vendor or enablement and investment, and send a request for further information from the member's own page. QSECDEF is vendor-neutral and sells training, not migration products, so the shortlist stays yours.

Two routes. QSECDEF membership gives your team the self-paced courses, the full lecture archive, the weekly call and 25 per cent off CPQCPM and partner training. Expert Membership is for the builders, consultancies and technology vendors serving the space sector who want to be found by the people reading this page; it includes a showcase listing with an enquiry form, the Industry Conversations and speaking slots at the annual QSECDEF symposium.

No. QSECDEF is a vendor-neutral membership network. We train people and connect them with peers and peer-reviewed experts; we do not sell migration software or services.

CPQCPM is ten hours of live instruction over five weeks, two hours a week. The Quantum Cyber Security course is 4 to 5 hours, self-paced. The business bootcamp is self-paced at your own speed. The space courses are full-day sessions of six hours each and are listed with their formats on the training pages.