Post-Quantum Cryptography (PQC)

STRATUM was built with the post-quantum transition in view from the beginning. Continuum communications can use a hybrid cryptographic model that combines established classical protection with NIST-standardized post-quantum algorithms, giving operators a controlled path into quantum-resistant infrastructure without waiting for a future redesign.

STRATUM supports all three NIST-standardized PQC algorithm families: FIPS 203 ML-KEM, FIPS 204 ML-DSA, and FIPS 205 SLH-DSA.

FIPS 203: ML-KEM

ML-KEM is NIST's module-lattice key-encapsulation mechanism. It establishes shared secrets for quantum-resistant key establishment and is the core PQC building block for protected network sessions.

FIPS 204: ML-DSA

ML-DSA is NIST's module-lattice digital signature standard. It provides post-quantum signatures for authentication and integrity using the standardized successor to CRYSTALS-Dilithium.

FIPS 205: SLH-DSA

SLH-DSA is NIST's stateless hash-based digital signature standard. It provides an independent signature family based on hash-based cryptography and gives operators another standardized path for post-quantum authentication.

STRATUM's PQC mode is designed for migration rather than a one-day cryptographic cutover. Hybrid protection lets Continuum deployments retain the classical algorithms required by current policy while adding post-quantum key establishment and signature capability.

Enable Post Quantum Crypto from STRATUM Administration where PQC is required for the deployment. The setting belongs at the infrastructure layer because Continuum communication spans the workers, sites and platforms that form the STRATUM operating environment.

For long-lived mission data, this also addresses the harvest-now-decrypt-later problem. Traffic collected today may remain valuable to an adversary years from now, so the migration timeline starts before a cryptographically relevant quantum computer exists.

STRATUM product support for the NIST PQC standards and CMVP validation of a specific cryptographic module are separate facts. Validation attaches to the exact module and version that has completed the Cryptographic Module Validation Program.

The Go Cryptographic Module v1.0.0 is active under FIPS 140-3 certificate #5247 and includes validated ML-KEM. Go Cryptographic Module v1.26.0 adds ML-DSA and, as of October 21, 2026, is listed as Pending Review in CMVP. STRATUM tracks that module boundary independently from its broader support for FIPS 203, FIPS 204 and FIPS 205 algorithms.

For regulated deployments, verify the exact STRATUM build, enabled crypto mode, module version, and required validation status against the policy that governs the environment.

Executive Order 14412, issued June 22, 2026, established a Federal policy to transition information systems toward NIST-approved post-quantum FIPS and directs accelerated migration across Federal environments and critical infrastructure.

STRATUM's approach is to make PQC part of the infrastructure operating model so the same security architecture can move with deployments across datacenters, sovereign cloud, laboratories and the edge.

Executive Order 14412 · FIPS 203 · FIPS 204 · FIPS 205