News

IDEMIA Secure Transactions Achieves Industry-First EMVCo Certification for Post-Quantum Payment Cards

IDEMIA Secure Transactions (IST) has secured an industry-first EMVCo certification for a payment card platform integrating post-quantum cryptography (PQC) and crypto-agility services. Because payment cards operate in the field for three- to five-year lifecycles across heterogeneous point-of-sale (POS) and ATM networks, the platform prepares issuers for emerging quantum threats while preserving backward compatibility with existing payment flows.

IDEMIA PQC Smart Card Specifications
Architecture ComponentImplementation DetailsFunctional Role
Silicon HardwareProprietary secure element with dedicated PQC acceleratorOffloads lattice polynomial math to preserve transaction speed under tight smart card power bounds.
Algorithm StackIDEMIA Sphere PQC library (NIST ML-KEM & ML-DSA)Provides quantum-safe key establishment and transaction signing optimized for low-memory chips.
Software EnvironmentCertified Java Card OS with crypto-agility servicesAllows algorithm updates over time and hosts external credentials (e.g., FIDO authentication, digital ID).
Compliance StandardEMVCo Security CertificationValidates global interoperability and security across legacy payment acceptance terminals.

The primary hurdle for post-quantum smart cards centers on physical transaction budgets. Lattice-based algorithms require significantly larger keys and signatures than legacy RSA or ECC, threatening the 300-to-500-millisecond contactless Near Field Communication (NFC) latency standard. Broad commercial deployment will require POS terminals to support expanded data buffers while maintaining instantaneous tap-to-pay throughput.

Full commercial details are available in the official IDEMIA Press Release here.

In GQI Portal

The players behind the news

The team that writes QCR tracks every company, deal and technology in the GQI Factory, GQI's verified database of the quantum industry. Next up: every story linked to its players, coming to QCR's paid plans.

Leave a comment

All fields are required. Your email address will not be published.