Certification Programme description: Introduction to post-quantum cryptography as a controlled quantum-risk transition discipline, including quantum-computation consequences for confidentiality, authentication, integrity and long-term validation, harvest-now-decrypt-later exposure, EU transition policy, standards-status governance, enterprise cryptographic dependency scoping and quantum-readiness programme ownership; standards-aware algorithm engineering covering security notions, primitive selection, ML-KEM, ML-DSA, SLH-DSA, stateful hash-based options, parameter choices, encoding rules, key and signature sizes, maturity/watch status, algorithm diversity and portfolio governance; secure implementation and validation practice spanning reproducible PQC laboratories, standards-aware APIs, end-to-end key establishment, signing workflows, side-channel and fault resistance, entropy, memory safety, verification, fuzzing, interoperability testing and assurance evidence; hybrid secure-communications migration covering combiners, downgrade resistance, TLS 1.3 transition, SSH and privileged access, VPN, IPsec and IKEv2, messaging, application protocols and staged pilot-to-production integration; quantum-ready PKI, identity and trust services spanning PKI architecture, X.509 engineering for PQ signatures and key establishment, CA/RA operations, HSM/KMS integration, key lifecycle, certificate policies, code, firmware, container and secure-boot signing, EU digital identity, trust services and long-term validation; discovery, agility and migration engineering covering cryptographic inventory, CBOMs, dependency mapping, quantum-risk scoring, urgency prioritisation (data lifetime, trust lifetime, migration lead time), crypto-agile abstraction and control planes, performance, interoperability, procurement clauses, supplier evidence, migration factory and change delivery; sector deployment and operational assurance through reference architectures, cloud/network/product/IoT patterns, observability, certificate rotation, incident triggers, assurance and certification evidence, procurement review, strategic complementarity with QKD and symmetric-strengthening decisions; concluding Quantum-Readiness Transition and Assurance Dossier with impact maps, timing-risk register, algorithm profiles, implementation receipts, hybrid protocol and PKI designs, CBOM/performance evidence, supplier decisions, runbooks and board-ready migration recommendation
Certification Programme version/revision: EITC/AI/AISv1r1)Earned ECTS credits: 2
