POST-QUANTUM CRYPTOGRAPHY
The quantum computer
arrives in 2030.
Your HSM is already obsolete.
Cryptrig CQ1: lattice-based key generation at wire speed. Hardware-native CRYSTALS-Kyber and CRYSTALS-Dilithium for financial infrastructure that cannot afford a migration crisis.
HARVEST NOW, DECRYPT LATER
Harvest Now, Decrypt Later is not a future threat
Adversaries are already archiving encrypted financial data. When a CRQC arrives — in 7 years, not 70 — they will decrypt it retroactively. SWIFT messages. Card tokenization keys. Long-term bond records.
Your migration timeline must start before the threat is visible.
Read the threat briefingCQ1 MODULE
The first post-quantum HSM built for financial rails
Hardware-native CRYSTALS-Kyber-1024 and Dilithium-3. No software emulation. No latency penalty. Designed to slot into your existing HSM infrastructure without application rewrites.
Full Specifications| Form Factor | 1U rack-mount, PCIe and PKCS#11 interfaces |
| Algorithms | CRYSTALS-Kyber-1024, CRYSTALS-Dilithium-3, X25519 hybrid |
| Throughput | >18,000 Kyber key-encapsulations/sec |
| Latency | <0.8ms P99 at 10,000 ops/sec sustained |
| Design Target | FIPS 140-3 Level 3 |
WHY HARDWARE
Software PQC libraries run at 1/30th the throughput of CQ1
Wire-speed lattice operations
Kyber key encapsulation in dedicated silicon — not a CPU interrupt. No shared-core contention in high-transaction environments.
Physical tamper detection
Zeroizes all key material within 100ms of case intrusion. Meets the attack-resistance baseline banks require under PCI HSM v3.
Hybrid classical + PQC
Runs X25519 + Kyber-1024 in parallel. Zero downtime migration: classical-only, hybrid, or full PQC modes switchable via policy.
Designed for FIPS 140-3 Level 3
All cryptographic boundary, physical protection, and key lifecycle controls architected to the FIPS 140-3 Level 3 specification from day one.
Fits into your existing HSM infrastructure
CQ1 speaks PKCS#11 and JCA/JCE. It drops into the same slot as your current Thales Luna or Entrust nShield — your applications need no rewrites. Cryptrig handles the quantum migration layer.
See integration details