Crypto4A Technologies

Crypto4A Technologies builds the QxHSM, a network-attached hardware security module whose core cryptographic module, QASM, natively executes NIST-standardized post-quantum algorithms — ML-KEM, ML-DSA, and SLH-DSA — alongside the stateful hash-based LMS signature scheme. In August 2026 QASM received NIST FIPS 140-3 Level 3 validation, which the company describes as the first such validation for an HSM supporting the full set of NIST-approved PQC algorithms, a claim that rests on an independent federal certification rather than vendor marketing alone.

The Ottawa-based, privately held firm is led by CEO Bruno Couillard and has built out partnerships that give its hardware real downstream reach: DigiCert is integrating the validated QASM module into its DigiCert ONE platform, and Crypto4A separately partnered with Brane to deliver what it says is Canada’s first quantum-safe digital-asset custody solution. The HSM itself, in blade form factor, is designed to let customers move from RSA/ECC to post-quantum keys without replacing their existing appliances.

Crypto4A’s differentiator versus most PQC software vendors is that it operates at the hardware root-of-trust layer with an actual federal certification in hand, not just algorithm support on paper. The main gap in public evidence is deployment scale — most of what’s documented are partnership and certification announcements rather than named enterprise customers running the HSM in production.