GSMA & Operators
The GSMA coordinates the mobile industry's response to the quantum threat through its Post-Quantum Telco Network (PQTN) taskforce. Rather than defining new algorithms, GSMA helps operators build crypto inventories, assess risk, and plan migration roadmaps — leaning on NIST algorithms and IETF protocols.
The Post-Quantum Telco Network (PQTN) taskforce
The PQTN taskforce brings together mobile operators and network vendors to drive industry-wide coordination on quantum-safe migration. Its goal is practical alignment: a shared understanding of where the risk lives in real networks, and a common path to address it, so that operators and their suppliers move in step rather than diverging.
Crucially, GSMA does not invent its own cryptographic algorithms. It aligns operators with the algorithms standardized by NIST (ML-KEM, ML-DSA, SLH-DSA) and the protocol-level work standardized by the IETF (PQC and hybrid key exchange in TLS, IPsec, and X.509). GSMA's value is in translating those building blocks into telecom-specific guidance.
The PQTN deliverables
The PQTN Task Force — which brings together many mobile operators and network vendors — has published a series of guidance documents:
- PQ.01 — Post-Quantum Telco Network Impact Assessment (whitepaper). Surveys how the quantum threat affects mobile networks and where migration effort must focus, framing the problem across RAN, core, transport, and roaming/interconnect, and highlighting the long secrecy lifetime of telecom data as a driver of "harvest now, decrypt later" (HNDL) urgency.
- PQ.02 — Guidelines for Quantum Risk Management for Telco (22 Sep 2023). A risk-management framework for operators.
- PQ.03 — Post-Quantum Cryptography – Guidelines for Telecom Use Cases (v2.0, 4 Oct 2024). Use-case-level migration guidance.
Operator guidance: inventory, risk, roadmap
GSMA's guidance and whitepapers give operators a repeatable migration discipline:
- Inventory. Discover and catalogue every use of cryptography across the estate — the Shor-vulnerable asymmetric primitives first (ECIES in SUCI, TLS/IPsec key exchange, certificates/PKI, roaming security), then symmetric usage and key sizes. You cannot migrate what you cannot see.
- Risk assessment. Prioritize by data secrecy lifetime, key/credential longevity, and exposure. Long-lived subscriber credentials and long-secrecy traffic rank highest because of HNDL.
- Roadmap. Build a phased plan emphasizing crypto-agility and hybrid (classical + PQC) deployment, sequenced to standards readiness in 3GPP and IETF, and coordinated with vendors.
| Phase | Operator focus |
|---|---|
| Inventory | Automated discovery of asymmetric crypto across RAN, core, transport, roaming |
| Risk | Rank assets by secrecy lifetime, key longevity, HNDL exposure |
| Roadmap | Crypto-agility, hybrid rollout, vendor coordination, standards tracking |
How GSMA leans on NIST + IETF
The division of labour is deliberate:
- NIST supplies the standardized algorithms (the FIPS-203/204/205 family).
- IETF supplies the protocol integrations — how PQC and hybrid key exchange slot into TLS, IPsec, and X.509 certificates.
- 3GPP defines the mobile-network specifics (e.g. a future PQC/hybrid ECIES for SUCI).
- GSMA orchestrates adoption across operators, providing assessment, inventory, and roadmap guidance on top of those standards.
Standards & references
- GSMA Post-Quantum Cryptography documents — PQTN hub (PQ.01, PQ.02, PQ.03).
- GSMA PQ.01 — Post-Quantum Telco Network Impact Assessment.
- GSMA PQ.02 — Guidelines for Quantum Risk Management for Telco (22 Sep 2023).
- GSMA PQ.03 — Post-Quantum Cryptography – Guidelines for Telecom Use Cases (v2.0, 4 Oct 2024).
- ITU-T X.1811 — Security guidelines for applying quantum-safe algorithms in 5G systems (Apr 2021).
Related
GSMA 与运营商
GSMA 通过其后量子电信网络（PQTN）工作组协调移动产业应对量子威胁。它并不定义新算法，而是依托 NIST 算法与 IETF 协议，帮助运营商建立密码资产清单、评估风险并规划迁移路线。
后量子电信网络 PQTN 工作组
PQTN 工作组汇集移动运营商与网络厂商，推动全行业在抗量子迁移上协同。其目标是务实对齐：对真实网络中的风险所在形成共识，并给出共同的应对路径，使运营商及其供应商步调一致，而非各行其是。
关键在于，GSMA 不自创密码算法。它推动运营商对齐 NIST 标准化的算法（ML-KEM、ML-DSA、SLH-DSA），以及 IETF 标准化的协议层工作（TLS、IPsec、X.509 中的 PQC 与混合密钥交换）。GSMA 的价值在于把这些构件转化为面向电信的具体指南。
PQTN 交付物
PQTN 工作组汇集多家移动运营商与网络供应商，已发布一系列指南文件：
- PQ.01 后量子电信网络影响评估——白皮书，系统梳理量子威胁如何影响移动网络、迁移工作应聚焦何处，从全网视角（RAN、核心网、传输、漫游与互联）审视问题，并强调电信数据的长期保密价值是先收集、后解密（Harvest Now, Decrypt Later, HNDL）紧迫性的驱动因素。
- PQ.02 电信量子风险管理指南（2023 年 9 月 22 日）——面向运营商的风险管理框架。
- PQ.03 后量子密码电信用例指南（v2.0，2024 年 10 月 4 日）——用例层面的迁移指导。
运营商指南 盘点 风险 路线
GSMA 的指南与白皮书为运营商提供了一套可复用的迁移方法论：
- 盘点——发现并登记全网每一处密码使用，优先识别易受 Shor 攻击的非对称原语（SUCI 中的 ECIES、TLS/IPsec 密钥交换、证书与 PKI、漫游安全），再梳理对称密码使用与密钥长度。看不见就无法迁移。
- 风险评估——按数据保密寿命、密钥与凭证寿命以及暴露程度排序。由于 HNDL，长效用户凭证与长保密流量优先级最高。
- 路线规划——制定分阶段计划，强调密码敏捷性与混合（经典 + PQC）部署，其节奏与 3GPP 及 IETF 的标准成熟度对齐，并与厂商协同。
| 阶段 | 运营商关注点 |
|---|---|
| 盘点 | 在 RAN核心网传输漫游中自动发现非对称密码 |
| 风险 | 按保密寿命密钥寿命HNDL 暴露对资产排序 |
| 路线 | 密码敏捷性混合部署厂商协同标准跟踪 |
GSMA 如何依托 NIST 与 IETF
这种分工是有意为之：
- NIST——提供标准化算法（FIPS-203/204/205 系列）。
- IETF——提供协议集成，即 PQC 与混合密钥交换如何嵌入 TLS、IPsec 与 X.509 证书。
- 3GPP——定义移动网络的具体细节，例如未来用于 SUCI 的 PQC/混合 ECIES。
- GSMA——在这些标准之上统筹运营商的落地，提供评估、盘点与路线指南。
标准与参考
- GSMA 后量子密码文档——PQTN 资源中心（PQ.01、PQ.02、PQ.03）。
- GSMA PQ.01 后量子电信网络影响评估。
- GSMA PQ.02 电信量子风险管理指南（2023 年 9 月 22 日）。
- GSMA PQ.03 后量子密码电信用例指南（v2.0，2024 年 10 月 4 日）。
- ITU-T X.1811——在 5G 系统中应用抗量子算法的安全指南（2021 年 4 月）。