The National Cryptographic Centre certifies the quantum-resistant capabilities of Indra Group’s solution for secure mobile communications, COMSec

The latest update to Indra’s secure mobile communications solution, COMSec, has been included in the ICT Security Products Catalogue (CPSTIC) of the National Cryptology Centre (CCN) as a qualified solution suitable for use in High-level systems under the National Security Scheme (ENS) and approved for Limited Distribution. It is thus the only solution of its kind endorsed by this body for secure mobile communications with quantum-resistant capabilities in Spain, offering comprehensive protection against both current and future threats.

The latest update to COMSec, version 5.1, incorporates post-quantum cryptography (PQC) technologies, a decisive step forward in anticipating the risks that future quantum computers may pose and the threat known as ‘harvest now, decrypt later’, whereby information intercepted today could be decrypted in a few years’ time.

This enhancement is in line with the CCN’s recommendations for a secure post-quantum transition set out in the CCN-TEC-009 guide, the CCN-STIC 221 guide on authorised cryptographic algorithms, and the official timetables marking the transition to hybrid systems combining classical and post-quantum cryptography. Furthermore, Indra has been a pioneer in the adoption of this type of technology both in Spain and internationally, including the MEMeC cryptological certification process.

The COMSec system enables secure voice and data transmission using any commercial operator’s networks. It can be deployed on a wide range of commercial mobile phones running the most widely used operating systems. Communications are based on the transmission of IP packets using proprietary and encrypted protocols, which prevents them from being traced. The system consists of an application installed on the user’s device and a virtual operator (IMS) that manages them.

COMSec maintains its ‘security-by-design’ approach and end-to-end encryption (E2EE) for voice, instant messaging, video calls and data transfer, integrating into on-premises architectures and highly controlled environments. The new PQC capabilities have been incorporated without affecting the user experience, whilst maintaining the robustness and low latency that characterise the product.

“With this update to the ICT Security Product Catalogue, Indra is reinforcing its leadership as a national developer of advanced secure communications solutions and as a benchmark in post-quantum cryptography, in close collaboration with the National Cryptology Centre. We are also reinforcing our commitment to protecting communications and sensitive information within government bodies and strategic organisations in our country,” emphasises Francisco Jiménez, Director of Secure Communications Systems at Indra.

Indra Group continues to strengthen its leadership in quantum technologies, with capabilities in communications, as well as in advanced sensor technology, key management and computing. It is leading the roll-out of the national quantum communications network, which will be integrated into the European quantum communications network EuroQCI, as well as the IberianQCI project, through Indra Space, which represents the south-western European segment of the future European network and interconnects the infrastructures of Spain and Portugal via terrestrial and satellite communications. The Indra Group collaborates with universities, technology centres, companies and start-ups specialising in quantum technologies at both national and European level to create a world-class technological ecosystem.