Crypto4A Technologies Achieves FIPS 140-3 Level 3 Certification for Innovative QASM Hardware
Crypto4A Technologies Achieves FIPS 140-3 Certification
In a groundbreaking development in the realm of cyber security, Crypto4A Technologies has successfully submitted its innovative QASM hardware cryptographic core for certification under the FIPS 140-3 Level 3 criteria. This achievement designates the QASM hardware as the first Hardware Security Module (HSM) to undergo evaluation that incorporates a complete suite of NIST Post-Quantum Cryptography (PQC) algorithms, marking a significant milestone in the industry's transition toward quantum resilience.
As quantum computing technologies advance, traditional cryptographic methods face increasing risks. Recognizing this threat, Crypto4A’s QASM hardware is engineered to be both quantum-safe and crypto-agile, designed with the capability to protect vital organizational assets against both current and future cryptographic vulnerabilities. The certification under the National Institute of Standards and Technology (NIST) Cryptographic Module Validation Program (CMVP) places Crypto4A at the forefront of the cybersecurity landscape, where the company’s technologies are already trusted by leading chip manufacturers, cloud service providers, government agencies, and enterprise customers worldwide.
Dr. Jim Goodman, the Chief Technology Officer and co-founder of Crypto4A, expressed his enthusiasm at this achievement: “We are excited to have submitted our QASM design to the CMVP for FIPS 140-3 Level 3 certification with full PQC algorithm support, which marks a first for the HSM industry! Our PQC-enabled QASM serves as the core component of our QxHSM and QxEDGE product offerings, providing all of our customers with a quantum-safe foundation on which to embark on the PQC migration journey.”
The QASM hardware features a unique FPGA-based design that allows for straightforward firmware updates. This agile approach ensures that organizations can seamlessly adopt new quantum-safe algorithms as they emerge. Traditional HSMs are often unable to offer such flexible updates, leaving them vulnerable to attacks that may exploit weaknesses presented by quantum computing advancements.
This submission represents a collaborative effort as Crypto4A partnered with atsec information security for the certification process. “The extensive level of knowledge and expertise provided by atsec was invaluable in ensuring that our implementation of the approved algorithms, and the security of our devices, met and exceeded the NIST FIPS standard,” Dr. Goodman noted.
Swapneela Unkule, the atsec CST Lab Manager, highlighted the collaborative nature of the project, stating, “We appreciate the opportunity and the trust that Crypto4A has put in us for their FIPS validation needs. Throughout the project, we witnessed professionalism, dedication, attention to detail, and a good understanding of FIPS requirements.”
As the urgency for adopting quantum-safe technologies escalates, industry leaders echo similar sentiments. Spencer Frye from CERTINext/eMudhra remarked, “Quantum-safe enablement begins with the hardware, and Crypto4A is leading the way in making this a reality.”
Moreover, DigiCert's Tim Hollebeek emphasized the importance of this achievement, stating,