India’s Post-Quantum Roadmap and the New Geopolitics of Cryptographic Power

In January 2026, at the World Economic Forum in Davos, Niccolo De Masi,  the chairman and chief executive of IonQ, delivered a warning of the “Q-Day” that should have dominated front pages. The "Q-Day", as he highlighted, refers to a moment when quantum computers become capable of breaking the public-key encryption that currently secures virtually all modern digital communication.

Illustration by The Geostrata

As per his estimation, this condition could arrive within three years. Around the same time, Google observed that quantum computing today is at the same inflexion point that artificial intelligence occupied five years before its disruptive acceleration. Bain & Company’s concurrent research found that 70% of global executives expect quantum-enabled cyberattacks within five years, yet 90% of organisations have no security plan to address this threat.

India is not immune to this technological reckoning. India’s entire digital civilisational project rests on a cryptographic foundation that quantum computing threatens to dissolve. The question is no longer whether the threat is real. It is whether India and the world will act before the window closes.

In May 2026, India’s Department of Science and Technology released a Report on Quantum-Safe Ecosystem in India: Roadmap to Quantum Resiliency, under the aegis of the National Quantum Mission. The document is more than a technical blueprint. It is a statement of strategic intent that elicits how India intends to navigate the post-quantum era not as a passive adopter of foreign standards but as a sovereign actor with indigenous capabilities shaping the global quantum security order.

To understand why this matters geopolitically, we must first understand the nature of the cryptographic catastrophe that quantum computing makes possible.

Modern digital security rests on complex, elegant mathematical encryption with certain computational problems which are quite difficult for classical computers to break. The RSA and Elliptic Curve Cryptography (ECC) algorithms that protect bank transactions and government communications, along with the global internet, are all built this way.

Shor’s algorithm, which is developed for quantum computers, breaks this assumption entirely. A sufficiently powerful quantum machine could factor a 2048-bit RSA key in hours, which would take classical computers longer than the age of the universe to crack. Grover’s algorithm, meanwhile, provides a quadratic speed-up for brute-force attacks on symmetric encryption, weakening even AES (Advanced Encryption Standard), which secures data at rest.

What makes this threat especially insidious is that adversaries do not need to wait for Q-Day to begin exploiting it. The “Harvest Now, Decrypt Later” (HNDL) strategy allows state actors to intercept and archive encrypted communications today and decrypt them later once quantum capability matures.

A complementary attack, “Trust Now, Forge Later” (TNFL), threatens the integrity of digitally signed documents and certificates. Both strategies are almost certainly already underway by the most sophisticated state actors. The Indian government, military, and financial system may already be haemorrhaging data that will become legible within the decade. Ultimately, the threat of the quantum era is not a future event to be prepared for, but it is a present vulnerability that needs to be contained.

The recognition that Q-Day is approaching has triggered a global scramble to migrate vulnerable cryptography. The United States has formalised three post-quantum cryptographic standards, which are ML-KEM (Module-Lattice-Based Key-Encapsulation Mechanism), ML-DSA (Module-Lattice-Based Digital Signature Algorithm), and SLH-DSA (Stateless Hash-Based Digital Signature Algorithm).

These are designed for two essential tasks. First, for general encryption that is being used to protect information exchanged across a public network, and second, for the protection of digital signatures, which are being used for identity authentication. The price for this migration of encryption standards across the US federal systems is estimated at USD 7.1 billion for the period of 2025 to 2035. The European Union has mandated national PQC (post-quantum cryptography) transition strategies from all member states by the end of 2026, with critical systems migrated by 2030. The United Kingdom, Australia, Canada, South Korea, and Singapore have all published phased national roadmaps.

Singapore’s approach is instructive in this regard. It has deployed a National Quantum-Safe Network Plus (NQSN+) since 2023, combining Post-Quantum Cryptography (PQC) and quantum key distribution (QKD) in an operational national network. This dual-track architecture, where PQC handles the scalable algorithmic layer and QKD secures the highest-assurance physical links, is increasingly seen as the gold standard.

And then there is China, which has not yet published a PQC migration timeline; however, through its domestic body, the Institute of Commercial Cryptography Standards (ICCS), it has launched its own quantum-resistant algorithm competition that is seeking indigenous post-quantum standards for encryption. Simultaneously, China has leveraged its extraordinary lead in quantum communication infrastructure.

Its Micius satellite programme has already demonstrated intercontinental QKD links. China aims to deploy quantum satellite constellations offering global coverage by 2027.

China is not only preparing its own digital infrastructure for the post-quantum era, but it is also actively building the architecture for a parallel, China-anchored quantum-secure communication order that offers encryption outside the NIST-centric Western framework.

On our part, India’s National Quantum Mission (NQM), approved by the Union Cabinet in April 2023 with an outlay of ₹6,003.65 crore, reflects a clear-eyed understanding that quantum technology is simultaneously a scientific frontier and a strategic necessity. The Mission has established four Thematic Hubs at premier institutions. A Quantum Computing Hub at IISc Bengaluru, a Quantum Communication Hub at IIT Madras in partnership with C-DOT, a Quantum Sensing and Metrology Hub at IIT Bombay, and a Quantum Materials and Devices Hub at IIT Delhi. Together, these four connect 152 researchers across 43 institutions in 17 states.

The May 2026 report, mentioned earlier, represents the operational crystallisation of NQM’s security ambitions. What emerges from it is a dual-track architecture. This includes a scalable PQC deployment across the enterprise ecosystem, combined with targeted QKD deployment for the highest-assurance strategic links.

The vision for physical infrastructure is ambitious. This includes an inter-city QKD backbone spanning up to 2,000 kilometres over existing fibre, connected to satellite-based QKD links capable of reaching ground stations across India and eventually with partner countries. This national quantum-secure backbone, once operational, would make India the only major democracy in Asia with a sovereign, end-to-end quantum communication infrastructure.

Perhaps the most strategically significant aspect of India’s quantum-safe roadmap is its insistence on indigenous capability. The testing and certification framework defines four assurance levels. Level 4 is the highest, covering sovereign and critical national infrastructure, specifically requiring indigenous cryptographic implementations. India’s preferential procurement policy, under the Atmanirbhar Bharat framework, will mandate that public and private organisations give priority to indigenously developed quantum-safe solutions. 

India’s relative early-mover advantage in the Global South deserves greater strategic attention than it has received. Most developing nations have no PQC transition strategy, no national testing infrastructure, and no indigenous quantum capability. India’s NQM framework positions it to offer quantum-safe solutions, standards expertise, and capacity-building to allies. It represents a significant soft power opportunity. A country that helps another nation secure its digital infrastructure against quantum threats earns a form of trust that is difficult to quantify and difficult to displace.

The quantum transition is a moment when the entire cryptographic infrastructure of the modern world must be rebuilt from its foundations. The countdown to “Q-Day” has already begun. The question is not whether India will be part of this new cryptographic order but whether India will help write its rules.

---

BY DARSHAN GAJJAR

Assistant Professor of Politics and International Relations,

The CVM University & Director, Research Pillars, The Geostrata

TEAM GEOSTRATA

info@thegeostrata.com