Infrastructure and transport
The risk
A fake ground system can try to send commands to on-board equipment.
With Crystallis
On-board and ground systems recognise each other before every link.
Learn moreQuantum Security
Complete security, resistant to quantum computers.
Crystallis protects the links of critical infrastructure, from remote site to central systems, with Zero Trust principles and quantum-safe hybrid encryption. It is software only and works alongside the systems you already have.
An agent at each end of the link
The agent is a Crystallis program installed next to existing systems, without touching them. Between the two agents, data travels encrypted end to end, with keys that also resist quantum computers.
How it worksZero Trust on every link, from day one
No device is trusted by default. Every link opens only after mutual recognition, and only for the permitted service. These protections already work against today’s attacks.
-
Threat: Unknown or cloned device
An identity for every device
Each device has its own key, generated on the device. A second person approves its admission.
-
Threat: Stolen credentials
Mutual recognition
Before a single byte is exchanged, both ends of the link recognise each other.
-
Threat: Intruder moving from system to system
One permission per service
Each device reaches only the services written in its rule. Everything else stays closed.
-
Threat: Interception and altered commands
Sealed messages
Every message travels encrypted with 256-bit keys. If someone alters or replays it, it is discarded.
-
Threat: Failure forced to fall back to plain text
Protection or nothing
If protection is unavailable, the link stops. Nothing passes in clear.
-
Threat: Lost device or departed supplier
Exclusion with one command
An excluded device is rejected and its open sessions close at once.
Copied today, opened tomorrow
It is called harvest now, decrypt later. Whoever records encrypted traffic today can keep it until Q-Day, the day a quantum computer breaks today’s cryptography. For anything that must stay confidential for years, the quantum threat is already here.
-
Copied today
An eavesdropper records links encrypted with today’s algorithms.
-
Stored
The copy stays in an archive, for years if needed, until someone has the means to open it.
-
Opened tomorrow
On Q-Day a quantum computer opens copies made with today’s encryption.
With Crystallis, the copy stays locked
Every key comes from two methods together, one classical and one resistant to quantum computers. To read the data, both have to be broken.
Hybrid encryptionDigital sovereignty, developed in Europe
Development and the team are in Europe, and the code belongs to Crystallis. The keys stay on the customer’s systems.
Keys on the customer’s systems
Keys are generated on the devices and never leave them.
No foreign cloud
There is no foreign cloud anywhere in the data path.
Updates decided by the customer
They arrive signed, are verified, and are activated when the customer decides.
Seven sectors, links built to last
Networks, plants and services that stay in operation for decades. For each sector: the risk and what changes with Crystallis.
Energy
The risk
Measurements and commands travel every day between plants and control centres.
With Crystallis
Links to plants open only for those with permission.
Learn moreOT and robotics
The risk
One poorly protected remote access point is enough to stop a line.
With Crystallis
Every machine talks only to authorised systems, for the intended service.
Learn moreAerospace
The risk
Telemetry, commands and design data travel between sites on the ground.
With Crystallis
The ground segment communicates over links protected agent to agent.
Learn moreTelecommunications
The risk
Traffic crossing the networks today can be copied and stored.
With Crystallis
Links between sites and to network equipment, encrypted agent to agent.
Learn moreFinance
The risk
Today’s transactions and documents must stay confidential for years.
With Crystallis
Payment chain links that are protected and provable.
Learn morePublic administration
The risk
Health and registry data stay confidential for decades.
With Crystallis
Offices and services linked over protected channels, with a signed log.
Learn moreNIS2, DORA and the EU timeline
NIS2 and, in finance, DORA already require rules on cryptography. Quantum-resistant cryptography is not yet mandatory, but the EU timeline is written, and many devices installed today will still be online after 2030.
2026
ACN, May
Italy’s TLS guidelines recommend the X25519 plus ML-KEM-768 hybrid key exchange, the same one Crystallis uses.
2026
European Union
By the end of 2026, Member States start the transition and prepare their first national plans.
2030
European Union
By the end of 2030, high-risk uses move to the new algorithms, such as data that must stay confidential for ten years or more.
2035
EU and NIST
EU target for as many systems as possible. For NIST, RSA and elliptic curves are no longer allowed after 2035.
These are reference dates: the European Commission sets them for Member States, NIST for US federal systems.
The regulatory framework, with sourcesContact us
A few lines on your context are enough: we will get back to you for a first meeting.
Thank you.
We have received your request.
We will get back to you to arrange a first meeting.
The form uses JavaScript. You can write to us directly at info@crystallis.eu