Quantum-Resistant Code Signing Secured by Luna HSMs - White Paper

As we transition to a post-quantum world, the importance of HSMs cannot be overstated. Stateful HBS schemes such as LMS and XMSS rely on careful state management. Stateless mechanisms such as ML-DSA will provide the same operational efficiency as classical cryptographic mechanisms. HSMs are designed to serve as the root of trust for cryptographic keys and protect the private keys in the HSM, ensuring the integrity of the code signing, throughout the process. HSMs help defend against unauthorized key extraction, a growing risk with the evolution of quantum computing capabilities. By using crypto agile HSMs, organizations can maintain trust in their signed software, even in a PQC future. 

Thales Luna HSMs are the market-leading crypto agile foundation of digital trust for your organization’s applications, devices, identities, and transactions. Governments and the most trusted brands in the world rely on Luna HSMs when preparing for post-quantum crypto solutions, code signing, protecting SSL certificates, supporting smart manufacturing and other use cases where confidentiality, integrity, and availability are paramount.