Securosys says its HSMs are ready for NIST post-quantum migration

Securosys said its hardware security modules already support NIST-standardized post-quantum cryptography and launched a sandbox to help organizations test migrations before production. The company framed the move as timely after a new U.S. executive order set deadlines that could reach global suppliers and contractors.

Why it matters: - U.S. Executive Order 14412 sets deadlines for federal agencies to move high-value systems to post-quantum cryptography by Dec. 31, 2030 for key establishment and by Dec. 31, 2031 for digital signatures. - The order also expands pressure beyond the U.S. government by requiring a proposed FAR Council rule for covered contractors within 180 days. - Global companies that sell into U.S. government supply chains may need to prepare before local regulators act.

What happened: - Securosys SA said its hardware security modules already support the NIST-standardized post-quantum cryptography algorithms. - The Zurich-based cybersecurity company also launched the Securosys CloudHSM Sandbox for migration testing. - CEO Robert Rogenmoser said the U.S. order creates a concrete requirement for government contractors and signals broader international adoption.

The details: - Securosys said its HSM portfolio is compliant with FIPS 140-3 Level 3 requirements. - The company said its HSMs support hybrid cryptographic approaches designed to allow gradual migration. - Securosys said organizations can use an HSM to test new cryptographic operations, validate application compatibility, support hybrid deployments, and prepare for larger keys and signatures. - The CloudHSM Sandbox is designed for development and integration testing. - The sandbox lets organizations experiment with ML-KEM, ML-DSA, SLH-DSA, HSS-LMS, and XMSS. - Securosys said the sandbox supports REST, PKCS#11, JCE, and Microsoft CNG APIs. - The company said the sandbox includes engineering support, detailed debug logs, and direct collaboration with Securosys engineers. - Securosys said it is offering free, limited-time access to the sandbox as a proof of concept with immediate access and no production risk. - More information is available on the company’s website. - Securosys also provided a LinkedIn link: the company’s social page.

Between the lines: - The announcement positions post-quantum readiness as a supply-chain issue, not just a U.S. compliance issue. - Securosys is using the policy shift to promote its HSM platform as a migration tool for organizations that need to test PQC before deadlines tighten. - The company’s message suggests that waiting for national rules outside the U.S. could leave vendors behind if they serve U.S.-linked customers.

What's next: - U.S. contractors are expected to face a proposed FAR Council rule after the 180-day window expires. - The State Department, working with NIST and other agencies, is expected to push NIST-standardized PQC algorithms to foreign governments and industry groups. - Organizations evaluating migration paths can begin testing hybrid and post-quantum deployments in the Securosys sandbox now.