Adding post-quantum algorithms to a FIPS module requires more than adding new algorithms. It changes the module boundary, RNG testing, integrity checks, entropy validation, and operational testing.
Join this webinar for an early look at wolfCrypt v7.0.0 and the engineering work required to bring NIST-standardized post-quantum algorithms inside the FIPS 140-3 boundary.
This webinar will cover:
- ML-KEM, ML-DSA, SLH-DSA, LMS, and XMSS inside the FIPS boundary
- Hybrid algorithm options and the planned removal of classical DH and DSA
- DRBG, continuous RNG tests, and integrity-check design
- Module boundary, finite state model, and entropy-validation requirements
Ask the Expert: Answers Key Questions
Our experts answer key questions about what attendees will learn
Why can’t PQC be added like a routine algorithm update?
Moving ML-KEM, ML-DSA, SLH-DSA, LMS, and XMSS into the FIPS boundary changes what the module must protect and verify. Those changes extend into its self-tests, state model, and validation evidence.
What happens to the classical algorithms already inside the module?
Classical DH and DSA are planned for removal, while RSA and SHA-1 remain for now. ML-KEM hybrid options provide a transition path that combines classical and post-quantum key establishment.
How will the module verify the new design?
A second Hash DRBG using SHA2-512 expands random-number generation, while updated continuous tests detect entropy failures. The reworked integrity check verifies the module without depending on memory addresses.
Date: August 11 | 9 AM PT
Register now for an engineering-level look at building post-quantum support into a FIPS 140-3 module.
As always, our webinar will include Q&A throughout. If you have questions about any of the above, please contact us at facts@wolfssl.com or call us at +1 425 245 8247.
Download wolfSSL Now