ICTK, Jiran Security Partner on PQC Migration Framework
ICTK, a South Korean quantum security firm, has entered into a memorandum of understanding (MoU) with Jiran Security to collaborate on post-quantum cryptography (PQC) migration and cryptographic asset discovery. Specifically, the joint initiative, named Q-BRIDGE, divides responsibilities with ICTK focusing on hardware and Jiran on diagnostics and client operations.
Scope of the Announcement
According to the Business Korea report, the goal is a five-stage framework: identifying cryptographic assets, analyzing quantum-related vulnerabilities, deploying post-quantum trust infrastructure, validating it through field testing, and executing full system migration. Indeed, ICTK will provide security hardware based on physically unclonable function (PUF) technology, alongside certificate authorities, key management systems, hardware security modules, and VPNs. Jiran will perform diagnostics using its Crypto Discovery platform and manage client engagement and joint bids.
That said, key details that would allow for an assessment of the work are absent. The announcement does not name specific algorithms, customers, contract values, dates, or terms of MoU duration or exclusivity in any available source. The companies mention plans for proof-of-concept tests and government R&D proposals, both of which are still in the planning phase rather than realized.
Relevant Standards for This Work
For PQC migration to align with established standards, it would need to target the schemes finalized by NIST: ML-KEM under FIPS 203, ML-DSA under FIPS 204, and SLH-DSA under FIPS 205. Vendors such as Sectigo emphasize the urgency due to the “harvest-now-decrypt-later” threat, where adversaries store encrypted data today to decrypt it once powerful quantum computers are available.
ICTK’s role focuses on a PUF-based root of trust and key management hardware. If any aspect involves Quantum Random Number Generation (QRNG) or entropy-source components, several caveats apply: random output alone does not guarantee quantum resistance, entropy-source validation is distinct from FIPS 140-3 module validation, and Quantum Key Distribution (QKD) is not PQC.
Vendors like Falqon Systems position key management across QKD, PQC, and hybrid setups, illustrating market trends rather than the technical status of this specific partnership. ICTK’s FIPS 140-3 module validation status remains undisclosed.
Moving Beyond Intent
This initiative will transition from intent to concrete progress once specific NIST-standard algorithms are named, certified modules are in place, dated deployments or contracts are announced, and a clear timeline is provided.
For now, this is an MoU between two companies outlining their aspirations. The announcement has been verified through trade press and a LinkedIn repost, not through a primary filing. No claims of quantum advantage have been made.