The Signal
IDEMIA and KT Put Post-Quantum SIMs Into South Korea’s Defense Pilot
IDEMIA Secure Transactions and KT are implementing NIST-standardized and Korean post-quantum algorithms on a SIM-equipped smart-card platform for South Korea’s 2026 pilot. The wider defense effort will assess post-quantum cryptography acros
Quantum.world Team · Written with AI · fact-checked ·
A SIM becomes part of South Korea’s defense-security test
IDEMIA Secure Transactions is working with South Korean telecom operator KT to put post-quantum cryptography on a SIM-equipped smart-card platform as part of the country’s 2026 Post-Quantum Cryptography Pilot Conversion Project. The project, organized by the Ministry of Science and ICT and the Korea Internet & Security Agency, targets defense communications and other critical systems. IDEMIA says it is implementing both algorithms standardized by the U.S. National Institute of Standards and Technology and Korean post-quantum algorithms.
The SIM is intended to do more than identify a subscriber. In the planned architecture, it serves as a hardware root of trust: a protected component that can safeguard sensitive credentials and carry out cryptographic operations for secure communications. The approach places those functions in a tamper-resistant secure element rather than requiring extensive changes across the connected device, according to the announcement.
The work is framed as a pilot, not a claim that the systems have completed operational deployment. KT’s broader effort is designed to apply and verify post-quantum cryptography in defense environments and assess performance and practical applicability there.
One pilot spans PCs, cameras, drones and 5G
KT is conducting the broader pilot for South Korea’s Ministry of National Defense and the Army Information and Communication School. Its listed targets include smart-unit platforms, user PCs, CCTV and video-storage systems, drones and their ground-control systems, and 5G network environments. That scope puts the SIM work alongside several kinds of equipment and communications infrastructure, rather than limiting the project to mobile handsets.
Post-quantum cryptographic methods can demand more processing power and memory than many classical schemes, the announcement says. IDEMIA says its dedicated SIM and eSIM platforms are designed to handle those operations within a secure, tamper-resistant environment. The release does not provide performance measurements, name the specific algorithms being implemented or give a timetable for the pilot’s tests.
Korean algorithms remain subject to validation
The proposed combination of NIST-standardized and Korean algorithms is meant to support changes in standards without requiring a wholesale redesign of systems. That capacity to change cryptographic algorithms as requirements shift is known as crypto-agility. In this project, the company says the capability would sit at the secure-element level, with the aim of limiting extensive device-level changes.
IDEMIA also says the work could become the first implementation of Korea’s KpqC algorithms on a smart-card platform in the country. The company explicitly makes that milestone conditional on final validation; the announcement does not say validation is complete. Its wording leaves the distinction clear: the project is expected to test the implementation, not announce a verified first deployment.
Jautard describes a practical transition
Fabien Jautard, EVP of Connectivity Services at IDEMIA Secure Transactions, said the partnership is intended to move post-quantum preparation into technical deployment. “Our collaboration with KT demonstrates how post-quantum readiness can turn this challenge into a practical transformation enabling organizations to evolve securely.” Fabien Jautard, EVP of Connectivity Services at IDEMIA Secure Transactions
The concrete test is whether the algorithms can run within the SIM platform’s constraints and work across the pilot’s varied defense systems. The announcement names the systems under assessment and the intended role of the SIM, but gives no benchmark results or schedule for completing validation.