Thought Leadership.

Expert analysis on post-quantum cryptography, hardware security, and European digital sovereignty.

RegulatoryJuly 10, 2026

NIS2 and Secured Voice: What Article 21(2)(j) Actually Requires

NIS2 Article 21(2)(j) obliges essential and important entities to use 'secured voice, video and text communications' — backed by fines of up to EUR 10 million or 2% of worldwide turnover. Here is what the provision literally says, who it binds, and how to satisfy it in practice.

8 min readRead Article

PQC ResearchJuly 10, 2026

What is a DMA Air-Gap? Hardware voice isolation, explained

A DMA Air-Gap is a hardware security architecture that galvanically isolates a device's audio path from the host phone: voice is captured and encrypted inside a separate secure enclave, so the operating system — and any spyware controlling it — never touches plaintext audio.

8 min readRead Article

PQC ResearchJuly 10, 2026

Harvest Now, Decrypt Later: Recorded Calls Are the Target

Harvest now, decrypt later means every call protected by classical key exchange is a future plaintext: adversaries record the ciphertext today and wait for quantum computers to break it. The deadline is set by your conversations' secrecy lifetime, not by the arrival date of a quantum computer.

7 min readRead Article

PQC ResearchMay 2026

Why ML-KEM-1024 is the new standard for secure communications

In August 2024 NIST finalised FIPS 203, elevating ML-KEM (formerly known as CRYSTALS-Kyber) to the status of mandatory federal standard for key encapsulation. For organisations defending data with a confidentiality horizon longer than five years, ML-KEM-1024 is no longer optional.

8 min readRead Article

ProductApril 2026

Q-Audion GEN-1: designing the first European PQC headset

Designing a headset that performs ML-KEM-1024 key exchange and ML-DSA-87 signing on a wearable battery budget required rethinking almost every subsystem of a conventional voice device. This is an architecture-level look at the trade-offs behind Q-Audion GEN-1.

12 min readRead Article

RegulatoryMarch 2026

EU Cyber Resilience Act: what it means for hardware security

Regulation (EU) 2024/2847, published in November 2024 and fully enforceable from 11 December 2027, imposes binding cybersecurity requirements on every product with digital elements placed on the EU market. For hardware vendors, the operational implications are significant and the lead time is short.

6 min readRead Article

IndustryFebruary 2026

The deepfake threat to enterprise voice communications

In early 2024, an employee at the Hong Kong office of a multinational engineering firm transferred the equivalent of 25 million US dollars to attackers after a video call with a deepfaked CFO and several deepfaked colleagues. The case is no longer an outlier: voice and video deepfakes have crossed the threshold from research curiosity to standard enterprise threat.

10 min readRead Article

Ready to Secure Your Digital Sovereignty?

Join Europe's post-quantum security revolution. Contact our team for institutional partnerships and strategic collaborations.

Request a Security Brief Contact Our Team