PQShield: what changed.
The recorded research and its supporting evidence.
This is a historical record. Read the current company research →1 evidence source added · axis ratings unchanged
Assessment reviewed 6 Sept 2026 · Research reviewed 7 Sept 2026What changed
- What the research demonstrates
- Previously
NIST certificate 4800 validates PQCryptoLib 1.0.0 at FIPS 140-3 Level 1 on specified configurations under an interim validation. Microchip separately documents PQShield library training within its FPGA developer ecosystem.
- Now
NIST CAVP record A8807 lists PQCryptoLib-Core 3.5.1 with ML-DSA and ML-KEM algorithm capabilities in specified operating environments. Separately, CMVP certificate 4800 provides interim FIPS 140-3 Level 1 module validation for PQCryptoLib 1.0.0. These are different validation records with different scopes.
- Sources added (1)
- Sources removed (1)
- Sources retained (1)
- What remains uncertain
- Previously
Certificate 4800 does not validate every PQShield version or all PQC algorithms; its approved-algorithm list does not include ML-KEM or ML-DSA. Algorithm testing, module validation and complete deployment security are separate questions.
- Now
CAVP algorithm validation does not provide the same assurance as CMVP module validation. Certificate 4800 covers version 1.0.0 and its stated configurations; it does not validate every PQShield release, its newer PQC algorithms or an entire deployed application.
- Research evidence: NIST CMVP certificate 4800: PQCrypto Lib
- Previously
Active interim FIPS 140-3 Level 1 validation for software version 1.0.0 with listed configurations and caveats; no blanket validation of newer PQC products.
- Source title
- NIST CMVP certificate 4800: PQCryptoLib
- Source publication date
- 16 Sept 2024
- Source type
- Government validation record
- Marked independent
- Not recorded
- Now
Active interim FIPS 140-3 Level 1 validation for software version 1.0.0 with listed configurations and caveats; no blanket validation of newer PQC products.
- Source title
- NIST CMVP certificate 4800: PQCryptoLib
- Source publication date
- 16 Sept 2024
- Source type
- Government validation record
- Marked independent
- Not recorded
- Where to look
- Certificate #4800 → Details; Caveat; Tested Configuration(s); Approved Algorithms; Software Versions
- Source checked
- 6 Nov 2026
- Product scope
- PQCryptoLib
- Source or product version
- Software 1.0.0; interim FIPS 140-3 Level 1 validation
- Evidence origin
- NIST authoritative registry
- Sources retained (1)
- Research evidence: PQCrypto Lib Core product and evaluation
- Previously
Product documents classical, PQC and hybrid cryptography, supported operating systems, API integration assistance and an evaluation request.
- Source title
- PQCryptoLib-Core product and evaluation
- Source publication date
- Not recorded
- Source type
- Official technical product page
- Marked independent
- Not recorded
- Now
Product documents classical, PQC and hybrid cryptography, supported operating systems, API integration assistance and an evaluation request.
- Source title
- PQCryptoLib-Core product and evaluation
- Source publication date
- Not recorded
- Source type
- Official technical product page
- Marked independent
- Not recorded
- Where to look
- Design Space; Get In Touch → Product Evaluation
- Source checked
- 6 Nov 2026
- Product scope
- PQCryptoLib-Core
- Source or product version
- Mutable product page; selected release must be confirmed during evaluation
- Evidence origin
- Organization documentation
- Sources retained (1)
Sources in this record (6)
Recorded dates use UTC and show when QubitWire saved the comparison. Review dates show the evidence check; neither is a new claim about when the underlying event happened. This view preserves the original research and assessment methodology.