The term on this page
- FIPSFederal Information Processing Standard
- the US government's standards series, and where the post-quantum algorithms were published
Also mentioned
RSARSARivest, Shamir and AdlemanA widely used public-key algorithm for encryption and digital signatures whose security relies on the difficulty of factoring large numbers.Read the full entry, ECDSAECDSAElliptic Curve Digital Signature AlgorithmElliptic Curve Digital Signature Algorithm, a widely deployed signature scheme based on elliptic-curve cryptography, offering strong security with compact keys.Read the full entry, ML-KEMML-KEMModule-Lattice-based Key Encapsulation MechanismModule-Lattice-Based Key-Encapsulation Mechanism, the NIST-standardized post-quantum KEM derived from CRYSTALS-Kyber and specified in FIPS 203.Read the full entry, ML-DSAML-DSAModule-Lattice-based Digital Signature AlgorithmModule-Lattice-Based Digital Signature Algorithm, the NIST-standardized post-quantum signature scheme derived from CRYSTALS-Dilithium and specified in FIPS 204.Read the full entry, SLH-DSASLH-DSAStateless Hash-based Digital Signature AlgorithmStateless Hash-Based Digital Signature Algorithm, the NIST-standardized signature scheme derived from SPHINCS+ and specified in FIPS 205.Read the full entry, KEMKEMkey encapsulation mechanismA public-key mechanism for securely establishing a shared secret key: the sender encapsulates a random secret to the recipient's public key, and the recipient decapsulates it with their private key.Read the full entry, AESAESAdvanced Encryption StandardThe Advanced Encryption Standard, a symmetric block cipher standardized by NIST that encrypts data using shared secret keys of 128, 192, or 256 bits.Read the full entry, NISTNISTNational Institute of Standards and TechnologyThe U.S. National Institute of Standards and Technology, the agency that develops and publishes cryptographic standards, including the FIPS series and post-quantum algorithms.Read the full entry, PQCPQCpost-quantum cryptographyCryptographic algorithms designed to run on today's classical computers while remaining secure against attacks by both classical and future quantum computers.Read the full entry are defined in the glossary.
Read this first
NIST's Cryptographic Module Validation Program listed certificate 5497 on August 19, 2026: the QASM Cryptographic Module, built by the Canadian vendor Crypto4A Technologies, validated at FIPS 140-3 Security Level 3. The certificate's algorithm list includes ML-KEM (FIPS 203) key generation and encapsulation and decapsulation, ML-DSA (FIPS 204) key generation, signature generation, and signature verification, SLH-DSA (FIPS 205) the same three operations, and LMS key generation and signing and verification, run alongside the classical AES, SHA, HMAC, ECDSA, RSA, and key-derivation algorithms the module also supports. Crypto4A and outlets covering the story describe it as the first PQC-capable hardware security module to reach FIPS 140-3 Level 3.
Standardizing ML-KEM and ML-DSA in August 2024 answered which post-quantum algorithms to use. It did not answer where to run them. A hardware security module is where an organization's most sensitive keys are supposed to live, generated and used inside a boundary that never exposes the raw key material, and until now the FIPS 140-3 validated HSM market had not caught up to the algorithms it was meant to protect. Certificate 5497 is a specific, checkable answer to that gap: a named module, a named vendor, a validation date, and a public algorithm list on NIST's own site rather than a vendor's press release.
What Level 3 actually buys you
- FIPS 140-3 defines four security levels. Level 1 covers approved algorithms with no physical protection requirements; Level 3 adds tamper-evidence and identity-based authentication and, critically for a key-custody module, requires zeroizing plaintext keys the moment a case is opened.
- Most production HSMs holding certificate authority roots, code-signing keys, or database encryption keys are procured at Level 3 specifically because of that tamper-response requirement, not Level 1 or 2.
- A module can be validated at Level 3 for its classical algorithms today and still have no post-quantum entry on its certificate, which is the gap that made this specific listing worth checking rather than assuming.
The bottleneck this chips at
We wrote when Executive Order 14412 set 2030 and 2031 deadlines for federal key establishment and signatures that the order quietly concedes its own bottleneck: Section 6(b) tells NIST to accelerate the Cryptographic Module Validation Program precisely because the algorithms have not been the constraint since 2024, shipping them inside a currently certified module has been. One certificate for one vendor's HSM does not clear that queue. It does demonstrate the queue can move, and it gives every architect who has been told "post-quantum HSMs are not validated yet" one concrete counterexample to check their procurement requirements against.
It is worth being precise about what the certificate does not cover. FN-DSA, the FALCON-based signature scheme NIST is standardizing as FIPS 206, is still a draft, so it is absent here and from every other module on the market. Level 3 is not Level 4, the highest tier, which fewer HSMs of any kind reach. And a single vendor's validation says nothing about the two or three other HSM vendors most enterprises are already standardized on, whose own post-quantum validations, if in progress, are not public yet.
The point
If a procurement conversation has stalled on "there is no validated hardware to run ML-KEM or ML-DSA in yet," that claim is now falsifiable by checking one NIST certificate number. It does not mean your preferred vendor has caught up, and it does not shrink the FIPS 206 gap. What it does is move the honest answer from a flat no to a specific yes, one module, one vendor, check whether it is one you can actually procure.
References
- Certificate 5497, QASM Cryptographic Module (csrc.nist.gov) - the validation record, algorithms, and security level.
- Cryptographic Module Validation Program (csrc.nist.gov) - the queue this certificate came out of.
- FIPS 203, Module-Lattice-Based KEM (csrc.nist.gov) - the ML-KEM standard the module implements.
- FIPS 204, Module-Lattice-Based Digital Signature Standard (csrc.nist.gov) - the ML-DSA standard the module implements.
- quantakrypto: FIPS 140-3, explained - what the security levels mean and why Level 3 is the common procurement floor.
- quantakrypto: Executive Order 14412 sets a 2030 federal PQC deadline - the order that names validation as the bottleneck this certificate addresses.