UK and Singapore Discuss Quantum Security and Post-Quantum Cryptography

Introduction

The United Kingdom and Singapore convened their 11th Financial Dialogue in Singapore, a platform that brings together senior officials from finance, technology and regulation to shape cross‑border collaboration. Among the many topics discussed—digital assets, AI, sustainable finance, and capital‑market reforms—a key focus was quantum technology. Both sides examined how financial institutions can transition to quantum‑safe security, highlighted the UK’s post‑quantum cryptography (PQC) migration guidance, and shared practical insights from Singapore’s Quantum Key Distribution (QKD) sandbox.

Quantum security priorities

• Supervisory expectations – Regulators from the UK National Cyber Security Centre and Singapore’s Monetary Authority (MAS) outlined a shared view that financial firms must assess quantum risk now and develop migration road‑maps. The guidance stresses risk‑based assessments, pilot testing of quantum‑resistant algorithms, and clear reporting to supervisors.
• Post‑quantum cryptography guidance – The UK released a migration framework that recommends a phased approach: inventory existing cryptographic assets, prioritize high‑value or high‑risk systems, and adopt NIST‑approved PQC algorithms. Singapore’s MAS echoed this methodology, emphasizing alignment with international standards to ease cross‑border data flows.
• Learning from the QKD sandbox – Singapore’s sandbox allowed banks and fintechs to trial QKD links for secure communications. Participants reported operational lessons such as the need for robust key‑management processes, integration with legacy networks, and cost‑benefit analyses. These findings were shared with UK regulators as a practical case study for early‑stage quantum‑safe deployments.

Coordinated steps forward

1. Joint research and testing – Both countries agreed to expand joint pilots that combine QKD with PQC, enabling firms to compare performance, scalability, and regulatory compliance.
2. Information sharing hub – A secure channel will be established for regulators to exchange threat intelligence, migration timelines, and best‑practice documentation, reducing duplication of effort.
3. Industry outreach – The upcoming UK‑Singapore business roundtable will feature workshops on quantum‑ready architecture, helping banks, asset managers and fintechs understand the technical and governance changes required.
4. Alignment with global standards – As the UK prepares for its G20 Presidency in 2027 and Singapore for the ASEAN Chairmanship, both will champion harmonised quantum‑security standards at multilateral forums, ensuring that cross‑border financial flows remain protected.

Practical takeaways for financial institutions

• Start inventorying cryptographic assets today; identify where RSA/ECC keys are used and map dependencies.
• Engage with regulators early to align migration plans with supervisory expectations and to access sandbox opportunities.
• Pilot hybrid solutions that combine QKD for key exchange with PQC for data encryption, leveraging the sandbox insights shared by MAS.
• Monitor standards bodies such as NIST and the International Organization for Standardization (ISO) for the latest algorithm approvals and implementation guidelines.
• Plan for staff training on quantum‑risk assessment and on the operational nuances of new cryptographic primitives.

Conclusion

The dialogue underscored that quantum security is no longer a distant research concern but an imminent regulatory priority for the financial sector. By synchronising guidance, sharing sandbox experiences, and committing to joint pilots, the UK and Singapore are setting a collaborative template that other jurisdictions can emulate. Financial firms that act now—by inventorying assets, engaging with supervisors, and experimenting with hybrid quantum‑safe solutions—will be best positioned to safeguard their operations as quantum computing matures.