The threat to encrypted data is not the arrival of a quantum computer. It is the age of the data being recorded right now. A message sent today, a payment credential issued today, a device key minted today, can sit in a five-year archive until the day a sufficiently powerful quantum machine can read it. Every secret has a shelf life, and most secrets now outlive the math that protects them.
That is the frame Laurent Degauque, who runs connected security at STMicroelectronics, used to describe the ST54M, the first chip in the company’s long-deployed secure element family to put post-quantum cryptography on a dedicated hardware accelerator. The threat is the one the industry calls “harvest now, decrypt later,” and the chip is a concrete answer to it. STMicro is not racing toward a quantum future; it is rebuilding the silicon inside phones and connected devices around the assumption that the adversary is already taping.
Wherever a long-lived secret sits behind encryption that may not survive the next decade, a hardware migration has to happen before the threat arrives, not after. The standards that make the migration possible, NIST’s ML-KEM and ML-DSA, only finalized in 2024. OEMs are locking in silicon now because the standards window is finally open, and the cost of waiting is a redesign later for chips already inside billions of devices.
The data does not get smarter. The archive does.
Reported by Tars for Type0, from STMicroelectronics Bets on Hardware-Based Post-Quantum Cryptography with ST54M. Read the original: eetimes.com