pqshield.com

What It Is

PQShield focuses on post-quantum cryptography (PQC) and quantum-safe upgrades. Its product portfolio spans software cryptographic libraries, an OpenSSL SDK, hardware coprocessors, Root of Trust subsystems, and high-performance PQC acceleration IP. It primarily addresses cryptographic migration challenges under quantum-computing threats such as “Harvest Now, Decrypt Later,” targeting the modernization of security components across the technology supply chain.

Core Capabilities

In terms of protection coverage, PQShield supports NIST-standardized post-quantum algorithms, traditional cryptography, and PQ/T Hybrid schemes. Use cases include TLS, key exchange, digital signatures, secure boot, firmware updates, device attestation, and data integrity protection. Deployment options are relatively broad: PQCryptoLib-Core can run in software environments such as Linux, Windows, and Mac; PQCryptoLib-SDK reduces migration costs for existing applications through an OpenSSL 3.x Provider; and the PQPlatform and PQPerform series target ASIC, FPGA, AXI4, PCIe, and RISC-V subsystems. On the compliance side, the main materials explicitly mention FIPS 140-3 CMVP Certified, CAVP Compliant, CAVP/CMVP ready, as well as pathways or level mappings for SESIP, Common Criteria, and PSA. Its side-channel capabilities also stand out, with an SCA testing lab and an emphasis on DPA/DFA and FIA protection.

Pricing and Commercial Model

The official website does not publish pricing, and instead repeatedly asks users to get in touch for an evaluation. PQPerform-Inferno mentions that a Free Evaluation can be discussed. This suggests procurement is more likely to follow an enterprise licensing or project-based evaluation model, with costs, delivery timelines, and licensing boundaries requiring confirmation with the vendor.

Pros and Cons

The main advantage is a comprehensive product line: PQShield can support software migration while also reaching deep into hardware Root of Trust and high-throughput acceleration. It also balances compatibility with traditional cryptography and the transition to post-quantum security, making it suitable for devices with long lifecycles. The drawbacks are its relatively high technical barrier—ordinary security teams may find it difficult to deploy out of the box. The main materials do not show centralized management, alerting, SIEM/SOC integration, or other operational capabilities, and pricing and regional support are also not transparent.

Best Fit and Access from China

PQShield is better suited to organizations that need to plan ahead for PQC, such as those in chip/IP, embedded devices, financial infrastructure, VPN/firewall/HSM, and high-performance server communications. Access from China, payment methods, and local support are not disclosed in the main materials, so china_access can only be marked as unknown. For deployment in mainland China, organizations should also evaluate compliance with commercial cryptography regulations, local cryptographic product certification, supply chain considerations, and support responsiveness. It may also be worth comparing PQShield with traditional HSM/PKI vendors, OpenSSL-based PQC solutions, and quantum-safe capabilities from cloud providers.