Only PQC‑supporting HSM validated by PCI SSC confirms Futurex’s commitment to quantum‑resistant payment security
SAN ANTONIO, Texas – June 11, 2025 – Futurex, a global leader in enterprise data security, today announced its achievement as the only hardware security modules (HSMs) supporting PQC that have been PCI HSM validated. This landmark certification underscores Futurex’s commitment to advancing secure payment technology and ensuring readiness for the evolving challenges posed by quantum computing threats.
Futurex’s HSMs have implemented cutting-edge post-quantum cryptographic algorithms, including ML-DSA (Message Length Digital Signature Algorithm) and ML-KEM (Message Length Key Encapsulation Mechanism), with SLH-DSA (Short Lattice Hash Digital Signature Algorithm) on the horizon. Futurex’s quick adoption of these algorithms, once ratified by NIST, reinforces its leadership in cryptographic innovation and compliance for the payment ecosystem.
“As the payments industry faces unprecedented challenges from quantum computing advancements, Futurex is at the forefront of securing sensitive data with cryptographic solutions that meet and exceed the latest PCI standards,” said Abby Smith, CEO of Futurex. “Being the only HSM supporting PQC that has been PCI HSM validated demonstrates our dedication to providing our customers with the tools they need to futureproof their payment infrastructures.”
As part of its PQC suite, Futurex’s HSMs are compliant with FIPS 203 and FIPS 204 standards, delivering unmatched security and scalability. This further validates Futurex’s ability to protect payment systems, secure data in transit and at rest, and ensure compliance with global security regulations.
Addressing Quantum Computing Challenges in Payments
Quantum computing presents a transformative technological shift with the potential to break traditional encryption methods. Futurex’s PQC-ready solutions proactively address these risks by implementing cryptographic algorithms that withstand quantum attacks, ensuring secure transactions across payment environments.
PQC functionality can be enabled through an upgrade for new and existing Futurex solutions, both on-premises and in the cloud, ensuring every payment workload stays secure today and into the future.
Cybercriminals are exploiting a tactic known as Harvest Now, Decrypt Later (HNDL). They target and store large volumes of data encrypted with today’s standards, anticipating that future advances in quantum computing will compromise these protections.
The PCI SSC’s certification process rigorously evaluates cryptographic solutions to ensure their resilience in payment applications. Futurex’s achievement highlights its role as a trusted partner for organizations seeking to enhance payment security while meeting evolving regulatory requirements.
Commitment to Innovation and Industry Standards
Futurex has earned a reputation as a pioneer in cryptographic technology, consistently achieving first-to-market milestones that redefine industry standards. From introducing cloud and virtualized HSMs to unifying payment and general-purpose HSMs, Futurex has addressed enterprise challenges in tokenization, key management, and data encryption on a global scale. This latest certification reflects Futurex’s ongoing collaboration with industry standards bodies, including the PCI SSC, to develop and deploy secure, scalable solutions for the payments sector.
For more information about Futurex’s post-quantum cryptographic solutions and how they safeguard payment infrastructures, visit https://info.futurex.com/pqc-facts-you-need-to-know-ebook.
###
About Futurex
For over 40 years, Futurex has been an award-winning leader and innovator in the encryption market, delivering uncompromising enterprise-grade data security solutions. Over 15,000 organizations worldwide trust Futurex to provide groundbreaking hardware security modules, key management servers, and cloud HSM solutions.
Futurex is headquartered outside of San Antonio, Texas, with regional offices worldwide and over a dozen data centers across five continents and delivers unmatched support for its clients' mission-critical data encryption and key management requirements.
About PCI SSC Approval
When granted, PCI SSC approval is provided by PCI SSC to ensure certain security and operational characteristics important to the achievement of PCI SSC’s goals, but PCI SSC approval does not under any circumstances include any endorsement or warranty regarding the functionality, quality or performance of any particular product or service. PCI SSC does not warrant any products or services provided by third parties. PCI SSC approval does not under any circumstances include or imply any product warranties from PCI SSC, including, without limitation, any implied warranties of merchantability, fitness for purpose, or non-infringement, all of which are expressly disclaimed by PCI SSC. All rights and remedies regarding products and services which have received PCI SSC approval shall be provided by the party providing such products or services, and not by PCI SSC.