PLAIN QUANTUM
Quick answer

What is a hardware security module (HSM)?

By Muhammad Atif2 min readReviewed 12 October 2026
The short answer

A hardware security module, or HSM, is a tamper-resistant device that creates, stores and uses cryptographic keys, so that the most sensitive keys never leave it in readable form. Applications send it data to sign or encrypt, and it sends back the result. Banks rely on HSMs for their most important keys: PIN processing, card keys, signing payment messages and running their own certificate authorities.

What it does

  • Keeps keys inside. Private keys are generated inside the HSM and are never exported in readable form.
  • Does the cryptography itself. Signing, decrypting and key-wrapping happen inside the device.
  • Resists tampering. Opening or probing the device is designed to wipe or protect the keys.
  • Controls access. Strict roles and approvals govern who can use or manage each key.

HSMs are independently tested. Most are validated under FIPS 140-3, the US and Canadian standard for cryptographic modules, or its predecessor FIPS 140-2, and those used for card and PIN processing are typically also certified under the payment industry's PCI PTS HSM standard.

What it doesn't protect against

An HSM protects a key from being stolen or misused. It doesn't change the key's mathematics. For RSA and elliptic-curve keys, a capable quantum computer wouldn't need to touch the HSM at all: it could work out the private key from the public key, which is public by design.

WHAT IT STOPS attacker HSMprivate key inside theft or copying: blocked WHAT IT CAN'T STOP public key(not secret) quantumcomputer privatekey maths attack: not blocked The HSM is never touched. Only a new algorithm closes this path.
An HSM guards the key itself. It can't change the maths that links a public key to its private key, so an RSA or elliptic-curve key inside an HSM is no safer from a quantum computer than one outside. The protection that matters for quantum is a new algorithm, which the HSM must support.

What changes for banks

Because so many keys live in HSMs, HSM support for the new algorithms is often the first item on a post-quantum programme's critical path. Nothing that depends on those keys can move to ML-KEM or ML-DSA until the HSMs can create and use them. Some devices can add the algorithms through a firmware update; older ones may need replacing. The questions to ask a vendor are which post-quantum algorithms are supported, in which firmware version, and whether that version has been validated.

Common confusions

  • "Our keys are in HSMs, so we're safe from quantum." No. The HSM protects the key, not the maths. This is one of the most common misunderstandings in quantum planning.
  • "Post-quantum means buying new HSMs." Not always. Many can be upgraded; the answer depends on the model, its firmware and the vendor's plans.
  • "A cloud key service isn't an HSM." Many cloud key-management services run on HSMs behind the scenes. The same post-quantum questions apply.

Sources and further reading

Tags show what kind of source each one is (how sources are used). Checked against these sources on 12 October 2026. Spotted an error? Email hello@plainquantum.com and it will be corrected, with a note.

  1. StandardFIPS 140-3: Security Requirements for Cryptographic ModulesNIST, 2019
  2. StandardSP 800-57 Part 1 Rev. 5: Recommendation for Key ManagementNIST, 2020
  3. StandardPost-Quantum Cryptography project (status of FN-DSA and other work)NIST Computer Security Resource Center
← All quick answersNext: What is a hash function? →