arXiv: On the Limits of Stretching Quantum Pseudorandomness

This publication is a theoretical computer science paper exploring the mathematical limits of quantum pseudorandomness, not a regulatory change to the Digital Operational Resilience Act (DORA). It does not amend, repeal, or introduce any new compliance obligations under DORA or any other EU financial regulation. The paper discusses how quantum computing may eventually break certain cryptographic assumptions, but it does not represent a current regulatory requirement.

For compliance professionals, the immediate impact is nil. No organization is required to take action based on this preprint. However, the paper signals a longer-term risk: as quantum computing advances, the cryptographic standards underpinning DORA’s ICT security requirements may need updating. This is relevant to financial entities, critical third-party providers, and cloud service providers subject to DORA.

Compliance teams should monitor this research area but take no immediate action. Continue to follow existing DORA requirements for cryptographic resilience, including the use of approved algorithms and periodic risk assessments. Stay informed about the European Commission’s future guidance on post-quantum cryptography, which may eventually require updates to ICT security policies and incident response plans. For now, treat this as a horizon-scanning input, not a compliance trigger.