Is post-quantum cryptography the same as quantum key distribution?

No — they are complementary but distinct. Post-quantum cryptography (PQC) replaces mathematically vulnerable algorithms (RSA, ECDH) with lattice- or hash-based alternatives that run on classical hardware and resist attacks from future quantum computers. Quantum key distribution (QKD) uses quantum optical channels to detect eavesdropping physically. A sovereign satellite programme ideally layers both: PQC for data encryption and authentication, QKD for ultra-sensitive key exchange on critical links.

Why can't we just buy PQC-as-a-service from a commercial cloud provider?

A commercial provider controls the key management infrastructure, the algorithm update cycle, and the audit trail — all of which are points of foreign intelligence or legal-compulsion risk. Sovereign ownership means the nation controls when algorithms are rotated, who audits the key stores, and whether any third-party jurisdiction can compel access. For diplomatic cables, military command links, or central-bank settlement traffic, that control gap is unacceptable.

How does a 'harvest now, decrypt later' attack actually work, and why does it make this urgent?

Adversaries intercept and store encrypted traffic today, when they cannot yet break it, then decrypt it retrospectively once cryptographically-relevant quantum computers exist. Intelligence assessments suggest such computers could emerge within 10–15 years. Any data that must remain confidential beyond that horizon — state secrets, treaty negotiations, critical-infrastructure schematics — is already at risk from traffic captured right now. Migration to PQC-protected satellite links must begin before the threat materialises, not after.

Which NIST algorithms should a national space programme prioritise?

NIST finalised three standards in August 2024: FIPS 203 (ML-KEM, for key encapsulation), FIPS 204 (ML-DSA, for digital signatures), and FIPS 205 (SLH-DSA, a stateless hash-based signature scheme). For a satellite command-and-control link, the recommended baseline is ML-KEM for session key exchange and ML-DSA for authenticating ground-to-spacecraft commands. SLH-DSA is preferred where long-term signature verifiability matters more than performance.

What orbit is best for post-quantum satellite communications?

LEO (400–1,200 km) is the default for latency-sensitive PQC-protected data links and for QKD, because atmospheric optical losses are lower and round-trip latency is 20–40 ms rather than 600 ms for GEO. However, LEO constellations require many satellites and ground stations to achieve continuous coverage. A sovereign programme might start with 6–12 microsatellites in sun-synchronous or inclined LEO to prove the technology before committing to full constellation build-out.

How long does a satellite PQC programme realistically take to reach operational status?

Based on comparable national quantum satellite programmes — China's Micius (launched 2016, operational 2017) and ESA's planned SAGA mission targeting 2027 — a well-resourced sovereign programme with no domestic quantum optics industry should budget 7–10 years from programme approval to initial operational capability. Buying heritage satellite bus designs and partnering with allied space agencies on payload development can compress this by 2–3 years.

Does ITU regulate quantum satellite spectrum differently from classical communications?

Not yet explicitly. Quantum optical payloads use free-space laser links (typically 780–1,550 nm wavelength), which fall outside the ITU Radio Regulations' frequency assignment framework. However, ranging, telemetry, and classical data downlinks on the same satellite require ITU coordination under the Radio Regulations and relevant ITU-R recommendations. ITU Study Group 17 is developing guidelines under the X.1700-series on quantum network security, but spectrum-specific regulation for quantum links remains an open gap.

Can smaller or lower-income nations realistically build this capability, or is it only for wealthy states?

The economics are improving rapidly. A nanosatellite-class QKD payload (such as the UK's QKD NanoSat demonstrator concepts studied under UKSA) can fit within a 6U–12U CubeSat bus costing under $5 million to build and launch. The harder cost is the ground optical telescope network, domestic cryptographic engineering expertise, and regulatory capacity. Regional consortia — similar to EUTELSAT or the African Union's ARMC frameworks — offer a viable path for nations that pool ground infrastructure while retaining sovereign control of their own key material.

1.9.3Experimental

Post-Quantum Communications

Engineer working at server racks in a data centre, checking cables and equipment — A focused technician inspects network cables, ensuring the physical infrastructure that anchors satellite post-quantum key distribution remains secure and reliable.

Satellite Post-Quantum Key Distribution Flow

1
QKD Satellite
Generates quantum-secured cryptographic keys onboard
2
Downlink
Quantum key transmitted via secure optical channel
3
Ground Station
Post-quantum algorithms decrypt and authenticate keys
4
End User Network
Unbreakable encrypted comms reach banks and governments

A QKD satellite distributes quantum-hardened keys via optical downlink, enabling communications resilient to future quantum computing attacks.

Page in the build queue

This application has its place in the atlas. The full page — short and long descriptions, what-matters bullets, sovereignty rationale, and the eight-field architecture block — is being written next.

Maturity reading: Engineering proven; commercial, regulatory or technical gates remain. Phase 1 built §4.1 (Maritime Intelligence) end-to-end as the depth-and-format reference. Section 4 is the next section to graduate from scaffold to full content; the rest follow on the roadmap.

Related applications

1.9.2 · Previous

Orbital Quantum Key Distribution

All in quantum communication systems

1.9.4 · Next

Quantum-Secured Government Links

Bring this into your sovereign programme.

All solutions Speak with engineering