Quantum Root Key

A root of trust built entirely on post-quantum cryptography, generated by OISTE and its operator WISeKey on 7 May 2025. It sits beside the classical roots so that the hierarchy can migrate authority by authority.

Generated 7 May 2025Algorithms ML-DSA, ML-KEM, FALCONTrust store inclusion pending

What it is

The Quantum Root Key is a new root of trust whose signatures and key establishment use algorithms standardised by NIST for the post-quantum era. It anchors a post-quantum public key infrastructure that issues quantum-resistant certificates and manages their full lifecycle: issuance, renewal, suspension and revocation, with CRL and OCSP endpoints.

Keys are generated and used only inside tamper-resistant hardware: hardware security modules, trusted platform modules and secure microcontrollers. That protects them against physical extraction and side-channel attack.

Why a second root, and why now

RSA and elliptic-curve cryptography both fall to Shor’s algorithm on a sufficiently large quantum computer. Data encrypted today can be recorded and decrypted later, so anything that must stay confidential into the 2040s is already exposed if it travels under classical encryption.

A root cannot be replaced overnight. It has to be generated, audited, distributed into operating systems and browsers, and adopted by every authority beneath it. Generating it years before it is strictly required is the only way to have it in place when it is.

Migration without a cut-over day

The classical and post-quantum hierarchies run in parallel during migration, with hybrid certificates where relying parties are not yet ready.

The hierarchy is designed for crypto-agility: algorithms can be rotated as standards evolve without regenerating the root or re-enrolling every device.

What it protects

Sectors whose confidentiality obligations run for decades gain most: defence and diplomacy, health records, financial infrastructure, telecommunications and industrial control. So do the more than 1.6 billion secure microchips deployed through WISeKey and SEALSQ, whose identities were provisioned under classical roots and now need a path to a quantum-safe one.

Availability

The key exists today. It becomes useful to the public when operating system and browser vendors accept post-quantum roots in their trust stores. The foundation’s work in 2026 and 2027 is that inclusion process, together with the CA/Browser Forum work that defines how post-quantum certificates are issued and audited.

Specification

Algorithms, custody and governance

Parameter sets will be published with the root certificate.

Element	Specification
Signature	ML-DSA (FIPS 204, formerly CRYSTALS-Dilithium). Parameter set to be stated
Key establishment	ML-KEM (FIPS 203, formerly CRYSTALS-Kyber). Parameter set to be stated
Alternate signature	FALCON, for constrained and high-throughput profiles
Key custody	HSM, TPM and secure microcontroller; no key material outside tamper-resistant hardware
Lifecycle	Issuance, renewal, suspension and revocation; CRL and OCSP endpoints
Governance	OISTE Policy Approval Authority; CP/CPS; independent audit
Applications	TLS and code signing, identity documents, IoT and industrial devices, satellite links, AI model and agent credentials

External deadlines

The dates regulators have already set

These are the milestones governments and industry are planning against. Sources are named under each date.

2027New US national security systems must support quantum-resistant algorithms under CNSA 2.0NSA, CNSA 2.0

2028Organisations complete discovery and a migration planUK NCSC timeline

2030112-bit RSA and ECC (for example RSA-2048, P-256) deprecatedNIST IR 8547, draft

2035Quantum-vulnerable public-key algorithms disallowedNIST IR 8547, draft; UK NCSC

Programme

From announcement to AI

Dec 2024
Programme announced
OISTE and WISeKey announce a next-generation quantum root of trust.
7 May 2025
Quantum Root Key generated
The root is generated in hardware on ML-DSA, ML-KEM and FALCON.
25 Sep 2026
Extended to AI systems
The programme expands into a post-quantum root of trust for AI models, agents, devices and human operators. Identity for AI agents.

Questions

What relying parties ask

Does it replace the existing OISTE roots?

No. It runs beside them. Classical roots stay valid until their published end dates, and authorities migrate on their own schedule.

Can I get a post-quantum certificate today?

Contact the operator for pilot issuance. Public trust depends on browser and operating system support for post-quantum roots.

Who holds the key?

The key never leaves tamper-resistant hardware operated by WISeKey under the foundation’s policies and independent audit.

Where is the root certificate?

It will be published on Roots and certificates with its fingerprint once distribution begins.