As Europe accelerates its digital transformation, resilience emerges as a defining requirement for next-generation ICT infrastructure. Hyper-connectivity and the growing reliance on software-driven ecosystems have expanded the cyber-attack surface, making foundational security mechanisms more critical than ever. Among these mechanisms, the secure boot process plays a vital role in protecting digital systems by ensuring that only trusted and authenticated software is executed. In an era of emerging quantum computing threats, strengthening this foundational layer is becoming a strategic priority for Europe’s technological sovereignty.
Quantum algorithms, particularly those capable of solving complex mathematical problems exponentially faster than classical computing approaches, threaten to undermine current cryptographic foundations. This shift is driving global research efforts toward Post-Quantum Cryptography (PQC), which aims to develop algorithms resistant to quantum attacks while maintaining compatibility with existing infrastructure.
European policy and cybersecurity authorities have increasingly advocated for hybrid cryptographic strategies that combine traditional and post-quantum algorithms[1]. This hybrid Post-Quantum/Traditional (PQ/T) is seen as a practical pathway toward future-proof cybersecurity. However, implementation remains complex due to trade-offs between computational performance, hardware constraints, regulatory compliance, and operational scalability. Addressing these challenges requires innovation not only in cryptographic design but also in system architecture and hardware integration.
The EU-funded FORTRESS project directly addresses this strategic challenge by developing a scalable hybrid secure boot architecture designed for Europe’s evolving digital infrastructure. The project focuses on creating a flexible Root of Trust framework capable of integrating both classical and post-quantum cryptographic algorithms. Rather than replacing existing systems abruptly, FORTRESS promotes a gradual and secure transition towards quantum-resistant security models.
A core innovation of the project lies in its hardware-software co-design approach. By aligning cryptographic functions with hardware capabilities, FORTRESS aims to optimize security performance while maintaining operational efficiency across diverse device ecosystems.
The project also recognizes that digital resilience extends beyond technical design to include ecosystem interoperability and regulatory alignment. FORTRESS actively engages with industry stakeholders, and cybersecurity experts to ensure that developed solutions align with European security frameworks and compliance requirements. This collaborative approach supports broader adoption and helps bridge the gap between research innovation and practical deployment.
From a strategic perspective, FORTRESS contributes to Europe’s long-term digital sovereignty. As cyber threats become increasingly sophisticated, resilience must be built directly into the architecture of digital systems rather than added as an afterthought. By investing in quantum-resistant security solutions today, Europe can safeguard critical services, protect sensitive data, and maintain trust in digital technologies for decades to come.
The project also delivers broader societal and economic benefits. Secure digital infrastructure is a prerequisite for emerging technologies such as autonomous systems, smart cities, and advanced healthcare platforms. By strengthening secure boot mechanisms, FORTRESS supports the safe deployment of these technologies while reducing cybersecurity risks.
Looking forward, the transition to quantum-safe cybersecurity requires coordinated efforts across research institutions, industry partners, and regulatory bodies. Projects such as FORTRESS demonstrate how collaborative innovation can transform cybersecurity challenges into opportunities for technological leadership. By combining cryptographic research, and ecosystem collaboration, the project contributes to shaping a more secure and resilient European digital future.