A Global Readiness and Sovereignty Capability Model for Post-Quantum Cryptography Migration
Researchers propose a Readiness-Sovereignty Capability Model scoring 57 countries on post-quantum cryptography readiness and sovereignty.
The RSCM model decomposes cryptographic sovereignty into indigenous capacity, indigenous post-quantum control, and external dependency, with a gate requiring demonstrated creation in at least one core layer. Applied to 57 documented cryptographic actors, 20 countries clear the maker gate (15 full-stack, 5 research makers), 11 hold strong general capacity without post-quantum control, and 25 are dependent. Readiness correlates with independent cyber indices up to rank correlation 0.70, while post-quantum creation shows no significant correlation with commitment (0.22).
- Fifteen countries qualify as full-stack post-quantum makers, five as research makers
- Twenty-five of 57 assessed actors remain dependent on external cryptography
- Gate agreement shows quadratic-weighted kappa of 0.71 with stability checks
- Framework links PQC migration policy to measurable national sovereignty
From the original article
1 min read at arxiv.orgCryptographic dependence predates the quantum era, but the migration to post-quantum cryptography (PQC) opens a rare window to reshape it, because the algorithms, implementations, hardware, and standards adopted now can lock in dependence or sovereignty for decades.
By Mohamed Aly Bouke · arxiv.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.