Open Radio Access Networks (O-RAN) introduce flexibility and multi-vendor interoperability through open and standardized interfaces. The emergence of programmable RAN Intelligent Controllers (RICs), along with the ability to deploy third-party applications as xApps and rApps, further accelerates innovation. However, these advancements also expand the attack surface of 6G infrastructures and introduce significant new security challenges. As quantum computing threatens classical cryptography, O-RAN security must evolve toward quantum-resilient mechanisms. This article outlines a layered migration roadmap for integrating Post-Quantum Cryptography (PQC) and hybrid schemes into O-RAN{\textquoteright}s identity, control, and runtime layers. Building on O-RAN Alliance Work Group 11 and GSMA post-quantum telco network task force guidelines, we estimate the relative cost and performance trade-offs of classical, hybrid, and PQC-only protections across key interfaces. The results show that hybrid integration provides near-term quantum resistance with moderate overhead, while full PQC deployment requires architectural adaptations. The proposed approach offers a standards-aligned path toward secure, interoperable, and energy-aware O-RAN evolution for 6G.
Fernando, P & Braeken, A 2026, 'Transitioning O-RAN Toward Post-Quantum Security: A Layered Architecture, Performance Estimation, and Migration Strategies', IEEE Communications Standards Magazine , pp. 1-8. https://doi.org/10.1109/MCOMSTD.2026.3695588
Fernando, P., & Braeken, A. (2026). Transitioning O-RAN Toward Post-Quantum Security: A Layered Architecture, Performance Estimation, and Migration Strategies. IEEE Communications Standards Magazine , 1-8. https://doi.org/10.1109/MCOMSTD.2026.3695588
@article{0ebcfb06534d462b9f5d3e55db38b14c,
title = "Transitioning O-RAN Toward Post-Quantum Security: A Layered Architecture, Performance Estimation, and Migration Strategies",
abstract = "Open Radio Access Networks (O-RAN) introduce flexibility and multi-vendor interoperability through open and standardized interfaces. The emergence of programmable RAN Intelligent Controllers (RICs), along with the ability to deploy third-party applications as xApps and rApps, further accelerates innovation. However, these advancements also expand the attack surface of 6G infrastructures and introduce significant new security challenges. As quantum computing threatens classical cryptography, O-RAN security must evolve toward quantum-resilient mechanisms. This article outlines a layered migration roadmap for integrating Post-Quantum Cryptography (PQC) and hybrid schemes into O-RAN{\textquoteright}s identity, control, and runtime layers. Building on O-RAN Alliance Work Group 11 and GSMA post-quantum telco network task force guidelines, we estimate the relative cost and performance trade-offs of classical, hybrid, and PQC-only protections across key interfaces. The results show that hybrid integration provides near-term quantum resistance with moderate overhead, while full PQC deployment requires architectural adaptations. The proposed approach offers a standards-aligned path toward secure, interoperable, and energy-aware O-RAN evolution for 6G.",
keywords = "Post-Quantum Cryptography, O-RAN Security, Hybrid Cryptography, Quantum-Safe 6G, Performance Evaluation",
author = "Pramitha Fernando and An Braeken",
year = "2026",
month = jun,
day = "9",
doi = "10.1109/MCOMSTD.2026.3695588",
language = "English",
pages = "1--8",
journal = " IEEE Communications Standards Magazine ",
publisher = "IEEE",
}