South Korea Expands PQC Pilot to Defense, Finance, Telecom as Harvest Now Threat Accelerates Timeline
If South Korea's defense sector cannot migrate to PQC within the pilot window (estimated 2-3 years), it will face the same asymmetry that constrains NATO allies: fielding platforms with cryptographic vulnerabilities to a known future threat.
This forces a secondary decision on allied interoperability—the KF-21 and future Korean naval platforms must use PQC standards compatible with US and Australian systems (via AUKUS), but if the pilot reveals divergence, Korea will either have to adopt US standards (limiting sovereign design flexibility) or maintain separate crypto stacks (fragmenting allied command integration).
South Korea's defense procurement ecosystem now faces a hard deadline to migrate cryptographic standards before quantum-capable adversaries can retroactively break current classified communications.
The Defense Acquisition Program Administration (DAPA) and Korea Aerospace Industries—already managing the KF-21 fighter's integration of allied systems—must now absorb PQC migration into development and production timelines for active programs.
If the pilot reveals incompatibility with legacy defense platforms (ship combat systems, air defense networks, command-and-control links), DAPA will face a choice between accepting technical debt in fielded systems or delaying capability delivery.
Watch for the pilot's Phase 2 results (expected late 2026 or early 2027) to determine whether PQC can be retrofitted to existing platforms or requires new procurement cycles.
What is the actual scope of South Korea's defense PQC migration—does it cover only new development (KF-21 Block 2, next-gen destroyers) or does it require retrofitting active systems like the Sejong-class destroyers and Chieftain tanks?
Fault Lines
Strategic intelligence, synthesized daily — with a public track record. Every call graded against what actually happened.