The International Organization for Standardization (ISO) has officially included the Classic McEliece algorithm in the asymmetric encryption standard ISO/IEC 18033-2. This is a landmark event for the entire crypto industry, as it paves the way for the mass adoption of protection against attacks using quantum computers.
Classic McEliece is a key encapsulation mechanism developed back in 1978 by Robert McEliece. Unlike familiar RSA and the Diffie-Hellman protocol, which are based on factorization and discrete logarithms, this algorithm relies on error-correcting codes, specifically binary Goppa codes. It is this mathematical foundation that makes it resistant to attacks from quantum computers.
The Okinawa Institute of Science and Technology characterizes Classic McEliece as one of the most conservative and time-tested designs in post-quantum cryptography. Since its creation in the 1970s, the system has withstood all known attempts at compromise, confirming its high reliability.
The main feature of the algorithm is the large size of its public keys, ranging from 255 KB to 1.3 MB. However, the ciphertext size remains compact, not exceeding 208 bytes. According to experts, the scheme is ideally suited for scenarios with static keys, such as VPN connections or file encryption. This makes it practical for the corporate and government sectors.
The ISO decision is critical, as the US National Institute of Standards and Technology (NIST) had previously postponed the standardization of Classic McEliece, favoring the HQC algorithm. However, NIST acknowledged that it might consider adopting a standard based on the ISO version in the future. Thus, ISO has outpaced the American regulator, providing the industry with a clear benchmark.
According to Post-Quantum CEO Ricky Hasan, ISO recognition will allow governments and private companies from 177 countries to implement the method more consistently. The company has already successfully tested the algorithm on combat drones under limited communication conditions, proving the scheme's viability despite the massive key size.
Classic McEliece is already mentioned in the recommendations of regulators in the Netherlands and Germany. Support for the algorithm has been implemented in well-known projects such as Debian, Ubuntu, and the Bouncy Castle library.
My analysis: The standardization of Classic McEliece is not just a technical step, but a signal to the market about the need to prepare for the quantum era. Although powerful quantum computers are still several years away, implementing such algorithms now is the only way to protect data that could be decrypted in the future. This is especially important for the cryptocurrency sector: "dormant" wallets and old transactions protected by weak cryptography will be at risk. In May, AmericanFortress already introduced a post-quantum signature scheme to protect existing crypto assets, including Satoshi-era wallets holding 1.1 million BTC. The industry must act proactively.