Canadian cybersecurity company Crypto4A Technologies said on August 20, 2026 that its patented QASM cryptographic module — the core of the QxHSM and QxVault hardware security appliances — has become the first quantum-safe HSM to achieve FIPS 140-3 Level 3 validation from the U.S. National Institute of Standards and Technology.
Every NIST-Standardized PQC Algorithm, Natively
The validated module executes every NIST-approved post-quantum cryptography algorithm directly on the device, including ML-KEM (FIPS 203), ML-DSA (FIPS 204) and SLH-DSA (FIPS 205), plus stateful hash-based signature schemes such as LMS. Classical algorithms including RSA and ECC continue to run on the same platform, meaning enterprise and government customers can migrate to post-quantum keys without ripping out the physical appliances underneath.
Level 3 Raises The Physical Bar
FIPS 140-3 Level 3 tightens the physical-tampering, identity-based authentication and key-management requirements over the older FIPS 140-2 regime that most incumbent HSMs are still certified against. Crypto4A CEO and co-founder Bruno Couillard said quantum computing is "advancing quickly, and the systems our economies, governments and national security depend on need to be ready." DigiCert CEO Amit Sinha called the milestone "the highest level of assurance that cryptographic keys are protected against both today's threats and the realities of a post-quantum future."
A Canadian Sovereign-Crypto Bet
QASM was designed and manufactured in Canada, and the validation extends a run of quantum-safe milestones for the country. Related coverage: Microsoft patches CVSS 10 Entra ID RCE, Cisco Crosswork & Secure Workload receive five CVSS 10 patches, and IonQ and Sandia sign quantum co-design MOU.
Reporting based on coverage from Quantum Zeitgeist, Quantum Computing Report and PRNewswire.