Strengthening Encryption Protection: NCCC Initiates PQC Migration Planning
To counter the future threats of quantum computing, Taiwan's NCCC has officially launched its Post-Quantum Cryptography (PQC) migration plan. Prioritizing 'Cryptographic Agility,' the project aims to seamlessly upgrade the payment ecosystem's security while minimizing the impact on external partners.
📋 Article Processing Timeline
- 📰 Published: April 24, 2026 at 16:10
- 🔍 Collected: April 24, 2026 at 16:31 (21 min after Published)
- 🤖 AI Analyzed: April 24, 2026 at 21:49 (5h 17m after Collected)
Central News Agency
(CNA, Reporter Lu Yen-tzu, Taipei, 24th) With the rapid development of quantum computing technology, global deployment of post-quantum cryptographic transitions is accelerating. The National Credit Card Center of R.O.C. (NCCC) stated today that it has officially launched its post-quantum cryptography (PQC) migration planning. Treating the minimization of impact on external partners as its primary principle, it will prioritize the introduction of cryptographic agility design to facilitate the rapid adoption of relevant technologies in the future.
In response to the evolution of emerging technologies, traditional encryption security for identity verification and online transactions may be threatened by quantum computers with powerful computational capabilities. The Ministry of Digital Affairs issued the "Post-Quantum Cryptography Migration Guidelines" last year, and the Financial Supervisory Commission (FSC) announced a financial cybersecurity resilience development blueprint at the end of the year, planning to release a version of the guidelines more tailored to the financial industry.
Kuei Hsien-nung, Chairman of the NCCC, explained via a press release today that as Taiwan's core institution for credit card transaction clearing and authorization routing, the NCCC actively aligns with the FSC's guiding principles. After officially becoming a member of the FSC's PQC steering group in November last year, an internal task force was formed to plan and execute the PQC migration project with high-level momentum.
Kuei stated that in addition to gradually promoting tasks at each stage in accordance with the FSC's schedule, the NCCC is also contacting international credit card organizations to understand their PQC migration progress. They are gathering information on domestic and international developments in PQC technology, consulting various PQC migration guidelines, and inventorying cryptographic assets and business scenarios to understand dependencies with internal and external stakeholders. This allows them to analyze future "quantum risks" and "migration timelines" to determine the priority sequence for system migration.
Lyu Hui-jung, General Manager of the NCCC, explained that the NCCC has incorporated cryptographic governance into its routine operations, continuously inventorying and updating cryptographic assets. Simultaneously, they are revising relevant design and procurement standards and enhancing cryptographic security monitoring before and after migration. They are carefully studying subsequent upgrades and response measures to ensure overall information security protection capabilities.
Lyu pointed out that while PQC technology is not yet fully mature, the NCCC will prioritize strengthening cryptographic infrastructure and introducing Cryptographic Agility design to smoothly transition to PQC technology in the future. Furthermore, they will comprehensively inventory current symmetric encryption systems that have not yet reached AES-256 strength and initiate upgrade evaluations to progressively elevate the overall encryption protection level.
She emphasized that considering banks, electronic payment providers, electronic ticket operators, and external contracted merchants are all crucial stakeholders, the NCCC will also launch a proactive communication plan with external parties. This involves explaining the potential risks of quantum computers and the competent authority's policy directions, as well as establishing informal communication channels with connected institutions and payment operators to continuously share project progress and provide preparation advice. This aims to build industry consensus, reduce the impact of future system switchovers, and ensure the steady development of the payment ecosystem.
Kuei added that PQC migration is a long-term and complex systemic engineering project. During its promotion, the NCCC will take "minimizing the impact on external partners" as its overarching principle and will plan appropriate implementation mechanisms to ensure that investments in human resources and technical equipment are substantively transformed into benefits that drive the upgrade of Taiwan's payment industry. (Editor: Chai Ssu-chia) 1150424
(CNA, Reporter Lu Yen-tzu, Taipei, 24th) With the rapid development of quantum computing technology, global deployment of post-quantum cryptographic transitions is accelerating. The National Credit Card Center of R.O.C. (NCCC) stated today that it has officially launched its post-quantum cryptography (PQC) migration planning. Treating the minimization of impact on external partners as its primary principle, it will prioritize the introduction of cryptographic agility design to facilitate the rapid adoption of relevant technologies in the future.
In response to the evolution of emerging technologies, traditional encryption security for identity verification and online transactions may be threatened by quantum computers with powerful computational capabilities. The Ministry of Digital Affairs issued the "Post-Quantum Cryptography Migration Guidelines" last year, and the Financial Supervisory Commission (FSC) announced a financial cybersecurity resilience development blueprint at the end of the year, planning to release a version of the guidelines more tailored to the financial industry.
Kuei Hsien-nung, Chairman of the NCCC, explained via a press release today that as Taiwan's core institution for credit card transaction clearing and authorization routing, the NCCC actively aligns with the FSC's guiding principles. After officially becoming a member of the FSC's PQC steering group in November last year, an internal task force was formed to plan and execute the PQC migration project with high-level momentum.
Kuei stated that in addition to gradually promoting tasks at each stage in accordance with the FSC's schedule, the NCCC is also contacting international credit card organizations to understand their PQC migration progress. They are gathering information on domestic and international developments in PQC technology, consulting various PQC migration guidelines, and inventorying cryptographic assets and business scenarios to understand dependencies with internal and external stakeholders. This allows them to analyze future "quantum risks" and "migration timelines" to determine the priority sequence for system migration.
Lyu Hui-jung, General Manager of the NCCC, explained that the NCCC has incorporated cryptographic governance into its routine operations, continuously inventorying and updating cryptographic assets. Simultaneously, they are revising relevant design and procurement standards and enhancing cryptographic security monitoring before and after migration. They are carefully studying subsequent upgrades and response measures to ensure overall information security protection capabilities.
Lyu pointed out that while PQC technology is not yet fully mature, the NCCC will prioritize strengthening cryptographic infrastructure and introducing Cryptographic Agility design to smoothly transition to PQC technology in the future. Furthermore, they will comprehensively inventory current symmetric encryption systems that have not yet reached AES-256 strength and initiate upgrade evaluations to progressively elevate the overall encryption protection level.
She emphasized that considering banks, electronic payment providers, electronic ticket operators, and external contracted merchants are all crucial stakeholders, the NCCC will also launch a proactive communication plan with external parties. This involves explaining the potential risks of quantum computers and the competent authority's policy directions, as well as establishing informal communication channels with connected institutions and payment operators to continuously share project progress and provide preparation advice. This aims to build industry consensus, reduce the impact of future system switchovers, and ensure the steady development of the payment ecosystem.
Kuei added that PQC migration is a long-term and complex systemic engineering project. During its promotion, the NCCC will take "minimizing the impact on external partners" as its overarching principle and will plan appropriate implementation mechanisms to ensure that investments in human resources and technical equipment are substantively transformed into benefits that drive the upgrade of Taiwan's payment industry. (Editor: Chai Ssu-chia) 1150424