Securosys says its HSMs already support NIST PQC algorithms

Securosys says its hardware security modules already support NIST-standardized post-quantum cryptography, as the White House pushes federal agencies toward faster quantum-resistant migration under Executive Order 14412. The company also launched a free three-month PQC Sandbox to help organizations test migration plans before production.

Why it matters: - The White House has set earlier deadlines for federal agencies to move high-value systems to quantum-resistant cryptography, raising pressure on vendors and critical infrastructure operators to prepare now. - Organizations that protect long-lived sensitive data face a growing risk that today’s encrypted information could be stored and decrypted later by future quantum computers. - Securosys is positioning its HSM portfolio as ready for that transition, with tools for testing, hybrid deployment, and migration planning.

What happened: - Securosys said its hardware security modules already support the post-quantum cryptography algorithms standardized by NIST. - The confirmation follows Executive Order 14412, signed by President Donald J. Trump on June 22, 2026. - Securosys also launched a free PQC Sandbox for three months to help organizations test migration strategies. - The company said the sandbox is available immediately and carries no production risk.

The details: - Executive Order 14412, titled “Securing the Nation Against Advanced Cryptographic Attacks,” sets an accelerated federal timeline for post-quantum migration. - Agencies must move all high-value assets and high-impact systems to PQC for key establishment by December 31, 2030. - Agencies must move those systems to PQC for digital signatures by December 31, 2031. - Within 180 days, NIST must revise Cryptographic Module Validation Program processes to speed certification of cryptographic modules. - Within the same 180-day window, the FAR Council must propose procurement rules requiring covered contractors to comply with applicable NIST FIPS standards, including those with NIST-standardized PQC algorithms, by December 31, 2030. - Securosys said it has integrated NIST-standardized PQC algorithms into its FIPS 140-3 Level 3 compliant HSM portfolio. - Securosys said its HSMs support hybrid cryptographic approaches during the transition period. - Securosys said HSMs can be used to test new cryptographic operations, validate application compatibility, support hybrid deployments, and prepare for larger keys and signatures required by PQC. - The Securosys CloudHSM Sandbox lets users test NIST-standardized PQC algorithms including ML-KEM, ML-DSA, SLH-DSA, HSS-LMS, and XMSS. - The sandbox supports REST, PKCS#11, JCE, and Microsoft CNG APIs. - The sandbox includes engineering support, detailed debug logs, and direct collaboration with Securosys engineers. - Securosys said the sandbox is designed as a secure, fully managed environment for development and integration testing.

Between the lines: - The announcement frames PQC as a near-term compliance and security issue, not a distant research project. - The sandbox offer lowers the barrier for organizations that want to test migration paths before buying or deploying production systems. - By emphasizing HSM readiness, Securosys is signaling that cryptographic infrastructure vendors now need to support both legacy and quantum-resistant methods at the same time. - CEO Robert Rogenmoser said organizations managing long-lived sensitive data should start testing PQC migration now instead of waiting for compliance deadlines.

What's next: - Federal agencies will need to map high-value and high-impact systems against the 2030 and 2031 deadlines. - NIST and the FAR Council must act within 180 days on certification and procurement updates. - Securosys is offering the PQC Sandbox free for three months, giving teams a short window to evaluate migration options before production changes. - Organizations that rely on HSMs will likely need to decide whether to adopt hybrid cryptography, begin testing PQC APIs, or accelerate full migration plans.

The bottom line: - Securosys is using the White House’s accelerated PQC mandate to argue that quantum-safe migration has already started, and that testing should begin now, not later.