QUAS Project Launches Work on Post-Quantum Security
for QUIC and SIP Communications

The QUAS project (A Quantum-Shielded Framework for Authentication in Communication Protocols) integrates
post-quantum cryptography (PQC) into modern communication protocols, with a focus on QUIC and SIP.
QUAS has been selected for funding under PQ-REACT Open Call #2. The project started in October 2025 and will
run for 12 months, contributing to PQ-REACT’s objectives on cryptographic agility and real-world adoption of
post-quantum cryptography.

Technical scope and roles
SPRITZ MATTER SRL leads the selection, implementation, and testing of post-quantum cryptographic algorithms,
focusing on NIST-recommended schemes and their performance in hybrid and quantum-safe configurations.
Edentify Foundation integrates SPRITZ’s post-quantum cryptographic components into real-world deployments,
including PQC-enabled SIP-over-TLS in the Linphone client, and validates interoperability and performance.
For QUIC (used in HTTP/3), the project extends handshake mechanisms with post-quantum key exchange options
such as HQC and Kyber, including hybrid and fallback strategies. For SIP (used in VoIP signaling), QUAS integrates
post-quantum digital signatures such as Dilithium into SIP signaling flows to strengthen integrity and authentication.
The project benchmarks the impact of PQC integration using practical metrics including latency, handshake time,
and CPU usage, supporting evaluation across different operational contexts.