Orange Joins Quantum-Safe eSIM Provisioning Program
Orange has joined a quantum-safe In-Factory Profile Provisioning (IFPP) program. This program, run by Acceleronix and IDEMIA Secure Transactions, enables device manufacturers to load operator profiles onto eSIMs directly at the factory. The three companies announced their collaboration on November 4 and plan to demonstrate the system live at electronica 2026 in Munich, from November 10 to 13. This use case is particularly relevant to the telecom credential supply chain, where keys often remain valid for many years. Implementing post-quantum protection early in this process ensures that devices are secure against future quantum threats long before they reach their end-of-life.
Orange’s Participation and System Overview
The In-Factory Profile Provisioning (IFPP) program, which began at MWC Barcelona in February, now includes Orange as its operator partner. The core concept is to enable a single hardware build that can deploy in any market, with connectivity assigned on the production line rather than pre-determined during design. According to IDEMIA’s announcement, devices leaving the factory will be tested, provisioned, and ready to connect immediately upon first power-on.
The responsibilities for the program are as follows:
- IDEMIA Secure Transactions provides the IFPP-ready eSIM, featuring what it describes as quantum-safe profile binding and secure delivery.
- Acceleronix supplies the IFPP Loader and factory orchestration tools, designed to integrate with existing production lines and offer per-device traceability.
- Orange contributes operator profiles and manages IoT connectivity through its network and roaming partners.
The program adheres to the GSMA SGP.41 framework and operates on existing eSIM IoT infrastructure under SGP.32. This allows original equipment manufacturers (OEMs) to deploy solutions now and transition to SGP.42 once that specification is published. The companies also highlight the use of compact form factors such as MFF4, a 2×2 mm eSIM that they claim is approximately 87% smaller than the widely used MFF2. The event in Munich will be a demonstration, not a live rollout, and it marks the first public display of the system.
Quantum Risk in eSIM Provisioning
eSIM provisioning involves transferring operator credentials between secure environments and onto a device during the manufacturing process. These credentials remain valid for the entire lifespan of the device, which, for sensors and trackers, can span many years. If the cryptographic binding protecting these credentials relies solely on classical cryptography, a future quantum attacker who records current traffic could potentially compromise them later.
This concern is driving post-quantum migration efforts in other sectors as well. Payment card issuers are moving in the same direction, with IDEMIA recently achieving EMVCo certification for PQC payment cards. Blockchain projects are also developing migration strategies, as evidenced by a Bitcoin Cash proposal for quantum-resistant transactions.
One critical detail that the companies haven’t yet provided concerns the specifics of their quantum-safe claims. Though they state the binding is “quantum-safe,” they haven’t named any NIST standards (such as FIPS 203, 204, or 205) or cited any FIPS 140-3 or Common Criteria validation. Until such evidence is presented, the term remains a vendor claim. Attendees of the electronica demo should look for details regarding the signature or key-establishment method, the secure element flow, and whether a hybrid mode is being utilized.
For further information on post-quantum migration in the telecom and payments industries, refer to QNews quantum-security coverage.