Identifying Obstacles of PQC Migration in E-Estonia

With the development of quantum technologies, there is an urgent need to secure existing IT infrastructure against quantum threats. Introducing post-quantum cryptography (PQC) to existing systems may protect them against future quantum computer attacks. Still, post-quantum migration is a cumbersome process that requires systematic planning and takes years. In this paper, we study Estonia's e-government ecosystem, outline systems and products that rely on potentially vulnerable cryptographic primitives, identify the main migration obstacles, and provide recommendations on how the migration process should be carried out.