The International Organization for Standardization (ISO) has included the Classic McEliece algorithm in the asymmetric encryption standard ISO/IEC 18033-2. This decision simplifies the implementation of protection against attacks using quantum computers.
Classic McEliece is a key encapsulation mechanism developed in 1978 by Robert McEliece. Unlike the widely used RSA and Diffie-Hellman protocols, which rely on factorization and discrete logarithm problems, this algorithm is based on error-correcting codes (specifically, Goppa codes).
The Okinawa Institute of Science and Technology described Classic McEliece as one of the most conservative and reliable designs in post-quantum cryptography. Since its development in the 1970s, the system has withstood all attempts at hacking.
A key feature of the algorithm is the large size of the public keys, ranging from 255 KB to 1.3 MB. However, the ciphertext remains compact (up to 208 bytes). According to developers from the British company Post-Quantum, the scheme is ideally suited for scenarios with static keys, such as VPN connections or file encryption.
The ISO decision is critical for the industry, as the U.S. National Institute of Standards and Technology (NIST) previously delayed the standardization of Classic McEliece, favoring the HQC algorithm instead. NIST has indicated that it may consider adopting a standard based on the ISO version in the future.
According to Post-Quantum CEO Rikki Hassan, ISO recognition will enable governments and private companies in 177 countries to implement the method more consistently. Previously, the company, in collaboration with STV Group, successfully tested the algorithm on combat drones under limited connectivity conditions, demonstrating the scheme's viability despite the large key sizes.
Classic McEliece is already mentioned in recommendations from regulators in the Netherlands and Germany. Support for the algorithm has been implemented in projects such as Debian, Ubuntu, and the Bouncy Castle library.
In May, AmericanFortress introduced a post-quantum signature scheme to protect existing crypto assets, including "sleeping" wallets from the Satoshi era containing 1.1 million BTC.