Crypto4A’s QASM hardware security module protects cryptographic keys and supports classical and post-quantum operations. Active NIST FIPS 140-3 certificate 5497 validates the module at overall Level 3, including listed ML-KEM, ML-DSA and SLH-DSA implementations. The security policy identifies QASM 1.1 with firmware 5.0.1.158 in FIPS mode and describes integration in QxEDGE or QxHSM. Different firmware or STANDARD mode is outside that validated configuration; certification should be assessed at module and operating-configuration level.
Technical detail
Core features
QASM key protection and cryptographic operations
Active FIPS 140-3 overall Level 3 certificate 5497
Listed ML-KEM, ML-DSA and SLH-DSA implementations
Validated QASM 1.1 and firmware 5.0.1.158 in FIPS mode
QxEDGE/QxHSM integration described in the security policy
Strategic technology
Canadian company
Qxhsm
Post Quantum Cryptography
Crypto Agility
Hybrid Cryptography
Use & integration
Recorded applications
Defence and security review
Remote and complex operations
Quantum-safe key protection and trust infrastructure
Phased cryptographic migration for government and critical systems
These describe the reviewed application scope, not confirmed deployments, released requirements or procurement eligibility.
Evidence of maturity
NIST initial validation dated August 19, 2026, with an August 21 update; the active record lists an August 18, 2031 sunset. The testing laboratory also lists this module validation.
Commercial availability
Confirm the delivered appliance, module and firmware against the certificate and security policy, alongside interfaces, deployment terms and key-management requirements.
Integration and verification
Readiness
A technology readiness level is not established by the reviewed public sources.
The publicly described Cryptographic key management and HSMs offering may be relevant to monitoring or remote-operation use cases; this is a derived mapping for reviewer assessment.
This is a reviewed public-source assessment. It is not procurement eligibility, endorsement, customer interest, or classified demand.
Original sources 5 linked records
These records support this capability and its published Mission area and Defence need connections. A source count is not a count of independent confirmations.
NIST active FIPS140-3 certificate5497 validates QASM at overallLevel3, initialAugust19 2026/updateAugust21, sunsetAugust18 2031. Listed ML-KEM, ML-DSA and SLH-DSA algorithms and security-policy configuration caveats apply to the module, not every appliance or mode.
Supports: Capability · defence applications
NIST active FIPS140-3 certificate5497 validates QASM at overallLevel3, initialAugust19 2026/updateAugust21, sunsetAugust18 2031. Listed ML-KEM, ML-DSA and SLH-DSA algorithms and security-policy configuration caveats apply to the module, not every appliance or mode.
Supports: Capability · technical tags
NIST active FIPS140-3 certificate5497 validates QASM at overallLevel3, initialAugust19 2026/updateAugust21, sunsetAugust18 2031. Listed ML-KEM, ML-DSA and SLH-DSA algorithms and security-policy configuration caveats apply to the module, not every appliance or mode.
Supports: Capability · core features
NIST active FIPS140-3 certificate5497 validates QASM at overallLevel3, initialAugust19 2026/updateAugust21, sunsetAugust18 2031. Listed ML-KEM, ML-DSA and SLH-DSA algorithms and security-policy configuration caveats apply to the module, not every appliance or mode.
Supports: Capability · core features
NIST active FIPS140-3 certificate5497 validates QASM at overallLevel3, initialAugust19 2026/updateAugust21, sunsetAugust18 2031. Listed ML-KEM, ML-DSA and SLH-DSA algorithms and security-policy configuration caveats apply to the module, not every appliance or mode.
Supports: Capability · technicaldomainslugs
NIST active FIPS140-3 certificate5497 validates QASM at overallLevel3, initialAugust19 2026/updateAugust21, sunsetAugust18 2031. Listed ML-KEM, ML-DSA and SLH-DSA algorithms and security-policy configuration caveats apply to the module, not every appliance or mode.
Supports: Capability · technicaldomainslugs
NIST active FIPS140-3 certificate5497 validates QASM at overallLevel3, initialAugust19 2026/updateAugust21, sunsetAugust18 2031. Listed ML-KEM, ML-DSA and SLH-DSA algorithms and security-policy configuration caveats apply to the module, not every appliance or mode.
Supports: Capability · technicaldomainslugs
NIST active FIPS140-3 certificate5497 validates QASM at overallLevel3, initialAugust19 2026/updateAugust21, sunsetAugust18 2031. Listed ML-KEM, ML-DSA and SLH-DSA algorithms and security-policy configuration caveats apply to the module, not every appliance or mode.
Supports: Capability · capability type
NIST active FIPS140-3 certificate5497 validates QASM at overallLevel3, initialAugust19 2026/updateAugust21, sunsetAugust18 2031. Listed ML-KEM, ML-DSA and SLH-DSA algorithms and security-policy configuration caveats apply to the module, not every appliance or mode.
Supports: Capability · commercial availability
NIST active FIPS140-3 certificate5497 validates QASM at overallLevel3, initialAugust19 2026/updateAugust21, sunsetAugust18 2031. Listed ML-KEM, ML-DSA and SLH-DSA algorithms and security-policy configuration caveats apply to the module, not every appliance or mode.
Supports: Capability · technical tags
NIST active FIPS140-3 certificate5497 validates QASM at overallLevel3, initialAugust19 2026/updateAugust21, sunsetAugust18 2031. Listed ML-KEM, ML-DSA and SLH-DSA algorithms and security-policy configuration caveats apply to the module, not every appliance or mode.
Supports: Capability · technical tags
NIST active FIPS140-3 certificate5497 validates QASM at overallLevel3, initialAugust19 2026/updateAugust21, sunsetAugust18 2031. Listed ML-KEM, ML-DSA and SLH-DSA algorithms and security-policy configuration caveats apply to the module, not every appliance or mode.
Supports: Capability · technical tags
NIST active FIPS140-3 certificate5497 validates QASM at overallLevel3, initialAugust19 2026/updateAugust21, sunsetAugust18 2031. Listed ML-KEM, ML-DSA and SLH-DSA algorithms and security-policy configuration caveats apply to the module, not every appliance or mode.
Supports: Capability · defence applications
NIST active FIPS140-3 certificate5497 validates QASM at overallLevel3, initialAugust19 2026/updateAugust21, sunsetAugust18 2031. Listed ML-KEM, ML-DSA and SLH-DSA algorithms and security-policy configuration caveats apply to the module, not every appliance or mode.
Supports: Capability · maturity
NIST active FIPS140-3 certificate5497 validates QASM at overallLevel3, initialAugust19 2026/updateAugust21, sunsetAugust18 2031. Listed ML-KEM, ML-DSA and SLH-DSA algorithms and security-policy configuration caveats apply to the module, not every appliance or mode.
Supports: Capability · summary
NIST active FIPS140-3 certificate5497 validates QASM at overallLevel3, initialAugust19 2026/updateAugust21, sunsetAugust18 2031. Listed ML-KEM, ML-DSA and SLH-DSA algorithms and security-policy configuration caveats apply to the module, not every appliance or mode.
Supports: Capability · core features
NIST active FIPS140-3 certificate5497 validates QASM at overallLevel3, initialAugust19 2026/updateAugust21, sunsetAugust18 2031. Listed ML-KEM, ML-DSA and SLH-DSA algorithms and security-policy configuration caveats apply to the module, not every appliance or mode.
Supports: Capability · technical tags
NIST active FIPS140-3 certificate5497 validates QASM at overallLevel3, initialAugust19 2026/updateAugust21, sunsetAugust18 2031. Listed ML-KEM, ML-DSA and SLH-DSA algorithms and security-policy configuration caveats apply to the module, not every appliance or mode.
Supports: Capability · technology readiness level
NIST active FIPS140-3 certificate5497 validates QASM at overallLevel3, initialAugust19 2026/updateAugust21, sunsetAugust18 2031. Listed ML-KEM, ML-DSA and SLH-DSA algorithms and security-policy configuration caveats apply to the module, not every appliance or mode.
Supports: Capability · name
NIST active FIPS140-3 certificate5497 validates QASM at overallLevel3, initialAugust19 2026/updateAugust21, sunsetAugust18 2031. Listed ML-KEM, ML-DSA and SLH-DSA algorithms and security-policy configuration caveats apply to the module, not every appliance or mode.
Supports: Capability · technical tags
NIST active FIPS140-3 certificate5497 validates QASM at overallLevel3, initialAugust19 2026/updateAugust21, sunsetAugust18 2031. Listed ML-KEM, ML-DSA and SLH-DSA algorithms and security-policy configuration caveats apply to the module, not every appliance or mode.
Supports: Capability · defence applications
NIST active FIPS140-3 certificate5497 validates QASM at overallLevel3, initialAugust19 2026/updateAugust21, sunsetAugust18 2031. Listed ML-KEM, ML-DSA and SLH-DSA algorithms and security-policy configuration caveats apply to the module, not every appliance or mode.
Supports: Mission area · Autonomous Patrol and Monitoring
NIST active FIPS140-3 certificate5497 validates QASM at overallLevel3, initialAugust19 2026/updateAugust21, sunsetAugust18 2031. Listed ML-KEM, ML-DSA and SLH-DSA algorithms and security-policy configuration caveats apply to the module, not every appliance or mode.
Supports: Mission area · Autonomous Patrol and Monitoring
NIST active FIPS140-3 certificate5497 validates QASM at overallLevel3, initialAugust19 2026/updateAugust21, sunsetAugust18 2031. Listed ML-KEM, ML-DSA and SLH-DSA algorithms and security-policy configuration caveats apply to the module, not every appliance or mode.
Supports: Mission area · Autonomous Patrol and Monitoring
NIST active FIPS140-3 certificate5497 validates QASM at overallLevel3, initialAugust19 2026/updateAugust21, sunsetAugust18 2031. Listed ML-KEM, ML-DSA and SLH-DSA algorithms and security-policy configuration caveats apply to the module, not every appliance or mode.
Supports: Mission area · Autonomous Patrol and Monitoring
NIST active FIPS140-3 certificate5497 validates QASM at overallLevel3, initialAugust19 2026/updateAugust21, sunsetAugust18 2031. Listed ML-KEM, ML-DSA and SLH-DSA algorithms and security-policy configuration caveats apply to the module, not every appliance or mode.
QASM security policy Table2 limits validated configuration to QASM1.1, firmware5.0.1.158 and FIPS operational mode; section11.1 identifies integration in QxEDGE/QxHSM. Different firmware or STANDARD mode is outside this validation.
Supports: Capability · commercial availability
QASM security policy Table2 limits validated configuration to QASM1.1, firmware5.0.1.158 and FIPS operational mode; section11.1 identifies integration in QxEDGE/QxHSM. Different firmware or STANDARD mode is outside this validation.
Crypto4A describes QxHSM as using hybrid LMS plus ECDSA for firmware updates and Classic McEliece plus ECDH for HSM-to-HSM secure communications as part of its quantum-safe-by-design approach.
The official capability material supports the named Cryptographic key management and HSMs offering and the bounded operational description prepared for reviewer consideration.
QASM security policy Table2 limits validated configuration to QASM1.1, firmware5.0.1.158 and FIPS operational mode; section11.1 identifies integration in QxEDGE/QxHSM. Different firmware or STANDARD mode is outside this validation.
Supports: Capability · summary
QASM security policy Table2 limits validated configuration to QASM1.1, firmware5.0.1.158 and FIPS operational mode; section11.1 identifies integration in QxEDGE/QxHSM. Different firmware or STANDARD mode is outside this validation.
