Classic McEliece Is Now Procurable. That's a Lane, Not a Victory.

Standards recognition, not algorithmic novelty, is what moves post-quantum cryptography from a research line into a procurement lane. The gate is the standards body's stamp; once it lands, regulated buyers can specify a scheme in VPNs, hardware security modules, and critical-infrastructure tenders. That gate is now open for code-based encryption: a public-key scheme built on a 1978 Robert J. McEliece design, which has survived almost five decades of continuous cryptanalysis, is part of ISO/IEC 18033-2.

The Qubit Report dates the standardization to June 2026, in a writeup that names Daniel J. Bernstein, Tanja Lange, and Carlos Cid among the contributors who carried the scheme through the ISO process. The longevity is the actual asset. Lattice schemes (NIST's ML-KEM) win on compactness; hash-based schemes win on simplicity; Classic McEliece wins on having been broken against for years without falling. The cost is public-key size, which is why fit, not victory, is the right frame. That fit-first reading is what readers can carry to the next post-quantum story: each standardized algorithm is a procurement lane, and ISO recognition is the gate that opens it.