PQC Migration for Power & Energy: A Migration Guide

A breaker tripped by a forged control command does not expose data. It cuts power. A SCADA system whose authentication is broken does not leak records. It loses the ability to distinguish legitimate commands from malicious ones. And unlike a bank, a utility cannot take its most critical systems offline to patch them.

India's DST Task Force designated power and energy as Critical Information Infrastructure with accelerated migration milestones starting 2027. The timeline reflects what is at stake.

Why the Power Grid Is a Quantum Target

Harvest Now, Decrypt Later and the 40-Year Threat Window

Harvest now, decrypt later attacks collect encrypted data today and decrypt it once a CRQC arrives. For nuclear facilities with operational lifespans exceeding 40 years, grid control records, safety analyses and spent fuel tracking data intercepted today remain decryptable for the entire life of the plant. No sector carries a longer exposure window. The DST Task Force states that all CII planning must proceed under an "assume breach" principle.

Long-Lived Field Devices and Equipment Lifecycles

OT and ICS equipment refreshes on 10 to 20 year cycles. RTUs, PLCs and bay controllers often carry hardcoded cryptographic keys and require planned outages to patch. Procurement decisions made today set the cryptographic posture of systems still running in 2040.

The OT and ICS Attack Surface in Energy

SCADA, ICS, and Authenticated Control Commands

SCADA masters authenticate to RTUs using RSA and elliptic-curve cryptography. A CRQC breaks both. An attacker forging control command signatures can trip breakers, issue false load-shedding instructions or manipulate frequency regulation, producing cascading grid failures.

Smart Grid, AMI Meters, and DER

Advanced Metering Infrastructure deploys millions of smart meters authenticated with RSA and ECC certificates. Distributed energy resources, solar inverters, wind turbine controllers and battery systems connect to DERMS platforms over TLS with quantum-vulnerable key exchange. Replacing cryptography across millions of deployed field devices requires years of coordinated planning.

Grid Protocols: DNP3, IEC 61850, and ICCP

IEC 62351 mandates authentication and encryption for IEC 61850, DNP3 and ICCP links. Current implementations across digital substations, protection relays and bay controllers use RSA and ECDSA. Migration requires firmware updates coordinated with planned outages, placing it on a multi-year procurement and maintenance schedule.

Vulnerable Algorithms and NIST PQC Replacements

RSA, ECDSA, ECDH and Diffie-Hellman protect every cryptographic layer of the energy estate. NIST's August 2024 replacements: ML-KEM (FIPS 203) for key encapsulation across SCADA and grid control, ML-DSA (FIPS 204) for authenticated control commands and firmware signing, and SLH-DSA (FIPS 205) for long-lived archives and nuclear safety records that must remain tamper-evident across decades.

Standards and Regulation for Grid PQC

NERC CIP and CISA OT Guidance

NERC is evaluating changes to CIP-005 and CIP-007 related to NIST's proposed 2030 RSA deprecation as part of its 2026 standards review. The US Quantum-GUARD Act, under consideration in Congress, would require FERC to factor quantum risk into grid reliability standards. CISA's October 2024 guidance, Post-Quantum Considerations for Operational Technology, calls OT PQC migration a significant and enduring challenge and identifies internet-connected OT devices as the priority migration candidates. CISA's January 2026 federal buying guidance directs procurement of PQC-capable products where commercially available.

India's PQC Task Force Milestones for the Power Sector

Power and energy is designated CII with accelerated milestones: cryptographic foundations and CBOM completion by 2027, high-priority system migration by 2028, full PQC adoption by 2029. The Task Force recommends that government RFPs for SCADA systems, smart meters and grid equipment require crypto-agile PQC-compliant procurement with mandatory vendor CBOMs.

A PQC Migration Roadmap for Utilities: IT and OT

Establish Quantum-Risk Governance

Form an OT/IT convergence team covering grid operations, cybersecurity, engineering and compliance. Set procurement policy immediately: all new SCADA systems, substation equipment and metering infrastructure must support PQC-ready firmware and carry vendor CBOMs.

Inventory Cryptographic Assets Across OT and IT

A Cryptographic Bill of Materials across IT and OT is the prerequisite for every subsequent phase. It must cover substation RTUs, protection relays, AMI head-end systems, DERMS platforms and grid management software. QNu’s seven-step quantum migration framework provides the sequencing: from standards engagement and asset inventory through cryptographic mapping, policy update, gap analysis, prioritisation, and phased execution, giving utility operators a tested process for moving from inventory to deployment.

Prioritise, Pilot, and Deploy in Waves

Rank systems by data shelf-life, operational criticality and migration difficulty. Internet-facing OT and IT-connected HMIs go first. Nuclear and safety-critical I&C systems carry the longest shelf-life and the tightest outage constraints. Legacy RTUs that cannot be updated use hybrid mode, pairing classical and post-quantum algorithms to achieve quantum safety within the existing hardware cycle.

Testing, Assurance, and Evidence Management

PQC algorithms carry larger keys and signatures than RSA and ECDSA. Test under realistic OT load: SCADA real-time control and protection relay authentication budgets are measured in milliseconds. Validate HSM firmware for PQC key operations. Generate audit evidence mapped to CEA Cyber Security Guidelines, IEC 62351 and NIST SP 800-82 throughout.

Recommended Actions for Utility Operators

Start with procurement policy. Require PQC-ready firmware and vendor CBOMs in every new grid equipment contract from 2026. Engage HSM vendors now. Then run the CBOM, the DST Task Force's 2027 milestone requires foundations in place, which means an inventory complete enough to drive prioritisation.

Quantum-Safe Building Blocks: PQC, QKD, and QRNG

For the highest-value links, QKD secures control-room backbones, inter-utility communications and nuclear facility channels with security rooted in physics rather than computational assumptions. QRNG provides the entropy root for key generation across both layers. The Quantum Key Management System governs keys across the combined estate in a single crypto-agile architecture.

The 2029 deadline is fixed. The grid's device refresh cycle is fixed. What is not fixed is whether today's procurement decisions put the sector ahead of that deadline or behind it.