Photo by Markus Winkler on Pexels
Singtel Shifts Quantum Security from Theoretical Concern to Active Migration Priority
For most telecommunications operators, quantum computing remains a future-tense problem — something to monitor, plan for, and revisit in a few years. Singtel is not most operators. The Singapore-based telecom giant has moved decisively to treat post-quantum cryptography (PQC) as an active infrastructure migration challenge, one that demands immediate action, sustained investment, and deep collaboration across its entire vendor ecosystem.
Kenneth Hwang, Vice President of Platforms and Client Solutions at Singtel, has been candid about what that journey looks like in practice. According to Hwang, preparing for quantum threats isn’t a switch you flip — it’s a years-long transformation that touches nearly every layer of a modern telecom network, from legacy software stacks to cutting-edge 5G core components.
Why Telecoms Can’t Afford to Wait
The urgency behind Singtel’s quantum security push stems from a concept cryptographers call “harvest now, decrypt later.” Sophisticated threat actors — including nation-state adversaries — are believed to be actively intercepting and storing encrypted telecommunications data today, with the intention of decrypting it once sufficiently powerful quantum computers become available. Estimates from the cybersecurity community suggest that cryptographically relevant quantum computers could emerge within the next decade, possibly sooner.
For telecom operators, which carry vast quantities of sensitive government, enterprise, and consumer data across their networks, the implications are severe. Current public-key encryption standards, including RSA and elliptic curve cryptography (ECC), are fundamentally vulnerable to quantum algorithms such as Shor’s algorithm. Once a large-scale quantum computer becomes operational, those protections could unravel almost instantly.
The U.S. National Institute of Standards and Technology (NIST) finalized its first set of post-quantum cryptographic standards in 2024, including CRYSTALS-Kyber for key encapsulation and CRYSTALS-Dilithium for digital signatures. These algorithms are specifically designed to resist both classical and quantum attacks, and they are now the foundational building blocks for any serious PQC migration strategy.
The Infrastructure Challenge Is Bigger Than It Looks
Singtel’s experience underscores a truth that many in the industry have yet to fully confront: migrating to quantum-safe cryptography is not a software patch. It is a comprehensive infrastructure overhaul.
Hwang has highlighted that the operator’s migration work spans multiple dimensions simultaneously — updating network management systems, renegotiating and respecifying vendor contracts to mandate PQC readiness, auditing software dependencies across hundreds of network functions, and training internal teams to understand and implement the new standards. Each of these workstreams carries its own timeline, budget requirements, and technical complexity.
Interoperability presents one of the most immediate practical challenges. A telecom network is an intricate ecosystem of hardware and software from dozens of vendors, many of which are at varying stages of PQC readiness. Ensuring that quantum-safe protocols work seamlessly across legacy systems, virtualized network functions, and cloud-native architectures requires painstaking coordination that simply cannot be rushed.
5G Core and Transport Networks in the Crosshairs
Within the telecom stack, 5G core networks and optical transport infrastructure are considered particularly high-priority targets for PQC migration. The 5G core relies heavily on TLS-based communications between network functions, all of which must eventually be upgraded to support PQC-compatible cipher suites. Similarly, the optical transport layer — where massive volumes of data traverse fiber links — represents a long-duration data protection risk that operators must address proactively.
Quantum Key Distribution (QKD) is also entering the conversation as a complementary technology, though it remains more expensive and infrastructure-intensive than software-based PQC approaches. Singtel has previously explored QKD in trial environments, recognizing that a layered security strategy — combining PQC algorithms with QKD where feasible — offers the most robust long-term posture.
Vendor Ecosystem Alignment Is Non-Negotiable
One of the most consequential lessons emerging from Singtel’s migration experience is the critical importance of vendor alignment. Operators cannot achieve quantum-safe networks unilaterally. Equipment manufacturers, software vendors, cloud providers, and standards bodies must all move in the same direction, at a compatible pace.
Singtel has been actively engaging its vendor community to establish clear PQC readiness timelines and contractual expectations. This kind of proactive vendor governance is expected to become a competitive differentiator — operators that lock in quantum-safe commitments early will have more manageable migration paths than those who delay and face a compressed, costly scramble later.
An Industry Roadmap Taking Shape
Singtel’s approach is increasingly resonating across the global telecom industry. Organizations including the GSMA, ETSI, and the 3GPP standards body are all advancing frameworks and specifications to embed PQC requirements into next-generation network standards. Meanwhile, operators in Europe, North America, and Asia-Pacific are beginning to publish their own quantum security roadmaps, signaling that the industry is moving from awareness to action.
For telecom professionals watching Singtel’s progress, the core message is clear: the quantum threat is not hypothetical, and the migration window is already open. Operators that begin their PQC journeys today — investing in cryptographic agility, vendor alignment, and staff expertise — will be far better positioned than those waiting for the threat to fully materialize. As Singtel’s experience demonstrates, the work of securing tomorrow’s networks must start firmly in the present.
