China to Set National Post‑Quantum Crypto Standards Within Three Years, Expert Says

Why It Matters

The establishment of Chinese PQC standards within three years could accelerate the worldwide transition away from RSA and ECC algorithms that are vulnerable to quantum attacks. By prioritizing finance and energy, China is targeting the sectors where data breaches would have the greatest systemic impact, potentially setting a benchmark for other economies. Moreover, the focus on structureless lattice algorithms introduces a new class of cryptographic primitives that may influence future international standards, reshaping the competitive dynamics among cryptographers, vendors, and regulators. If China’s standards gain international acceptance, multinational corporations may need to implement dual‑stack cryptographic solutions, increasing complexity and cost. Conversely, a fragmented standards environment could create security gaps, as organizations struggle to keep pace with divergent compliance requirements. The race to secure data against quantum threats thus becomes not only a technical challenge but also a geopolitical one, with implications for trade, technology transfer, and national security.

Key Takeaways

• China aims to issue national post‑quantum cryptography standards by 2027, per Tsinghua professor Wang Xiaoyun.
• The new five‑year plan places quantum technology alongside AI, nuclear fusion, and brain‑computer interfaces as a core strategic industry.
• Chinese researchers focus on "structureless lattice" algorithms like S‑Cloud+, claiming they avoid security degradation of algebraic lattices.
• Finance and energy sectors are identified as priority areas for PQC migration in China.
• The United States finalized its first PQC standards in 2024 and targets full migration by 2035, highlighting a global race.

Pulse Analysis

China’s decision to fast‑track PQC standards reflects a broader strategic calculus: securing the nation’s digital backbone before quantum computers become a practical threat. Historically, cryptographic transitions have been slow—consider the decade‑long rollout of TLS 1.3—yet the quantum timeline compresses that horizon dramatically. By investing heavily now, Beijing hopes to lock in home‑grown algorithms that could become exportable standards, giving Chinese firms a competitive edge in the emerging quantum‑secure market.

The emphasis on structureless lattice schemes is noteworthy. While the global community, led by NIST, has largely converged on algebraic lattice candidates, China’s parallel research stream could yield alternatives that either complement or compete with the NIST suite. If Chinese algorithms demonstrate superior security or performance, they may force a re‑evaluation of the current standardization trajectory, potentially leading to a bifurcated ecosystem where Western and Eastern standards coexist.

From a market perspective, the accelerated timeline creates immediate opportunities for vendors offering PQC‑ready hardware, software libraries, and consulting services. Companies that can certify compatibility with both NIST and Chinese standards will likely capture a larger share of the global addressable market, estimated to reach tens of billions of dollars as enterprises across finance, energy, and telecommunications upgrade their cryptographic stacks. However, the risk of a fragmented standards environment could also drive consolidation, as firms seek to reduce integration costs and avoid security gaps.

In the near term, watch for the release of China’s draft specifications, expected by late 2025, and any joint working groups that may emerge between Chinese standards bodies and international organizations. The outcome will shape not only the technical underpinnings of future encryption but also the geopolitical balance of power in the cyber domain.