Cryptograph products and services market analysis : version 1.0. : August 2024

This report presents an analysis of the cryptography products and services market in the EU as it has evolved from the point of view of the cybersecurity market under the Cybersecurity Act. This analysis contributes to the implementation of the ENISA's Single Programming Document 2023-2025, in particular Activity 7, Output 7.1., "Market analysis of the main trends in the cybersecurity market on both the demand and supply side, and evaluation of certified products, services and processes". The selection of cryptographic products and services as the focus of this cybersecurity market analysis, which was conducted in 2023, took into account stakeholders' feedback from a survey among ENISA external and internal stakeholders. The criteria used to select this area for analysis included the size, nature and importance of the market, the importance of the market segment for cybersecurity and its relevance to existing and upcoming EU regulatory activities and policy efforts, research and innovation. For this analysis, ENISA has performed primary research, i.e., a survey involving the main stakeholder types of the cryptography product and service ecosystem by means of dedicated questionnaires. The quantitative information from the survey has been validated/integrated via qualitative information obtained through open-source information and, to further assure quality, internal and external experts, including the members of the ENISA ad hoc working group on cybersecurity market analysis, were involved in the validation of the results. In addition, desk analysis has been carried as well as expert input provided by area experts involved throughout the research and analysis phases.