PQC Integration in HSMs: From Standards to Strategy
summary
NIST’s first post‑quantum algorithms are already implemented in commercial HSM firmware and vendors run interoperability tests via the NCCE lab and PKI vendors, with live pilot PKI and code‑signing projects underway. Benchmarks show higher CPU and signature sizes (notable latency and throughput trade‑offs), certification lags remain—FIPS 140-3 backlog while Common Criteria and ACVP evidence exist—and industry timelines (mandates and a 2035 deprecation horizon) force phased migration planning. Expect hybrid deployments, QRNG trials for long‑lived assets, and careful operational testing to avoid harvest‑now decrypt‑later risk.
AI-written summary · about
chapters (12)
- 0:00Conference overview
- 1:03Panel introduction
- 3:35Panelist introductions
- 9:43PQC migration progress
- 18:41HSM migration strategy
- 26:45HSM integration challenges
- 30:21Interoperability status
- 37:59Crypto agility in PQC
- 42:40Q&A on quantum exposure
- 48:04AI in HSMs and finance
- 50:15HSM readiness timeline
- 55:55Closing remarks
related talks
40mHardware Cryptographic Modules
35mHardware Cryptographic Modules
33mExtending or Evolving: Choosing the Path to Quantum Readiness
13mNavigating the Quantum Readiness Journey: Open-Source Cryptography, PKI and Signing Tools
31m2025 is Here - How to get your PQC Readiness Plan Underway
53mPanel: Migrating to Post-Quantum Schemes
48mPreparing for Quantum: A Pragmatic Approach towards Readiness
44mQuantum Cyber Risk: How Deep and How Wide?