English 
Tiếng ViệtPQC CAPABILITY MATRIX
View online; download CSV for data processing.
Online algorithm, product surface, maturity and evidence mapping; CSV remains available as a machine-readable download.
FILTER & DATA
The primary hyperlink no longer opens raw CSV.
| Capability | Product surface | Code | Status | Evidence scope | Reviewed |
|---|---|---|---|---|---|
| Hardware cryptographic module security | Trusted Key Token | validated | Validated | NIST CMVP Certificate #5331 and public Security Policy; applies only to the identified module, firmware and approved services. | 2026-07-19 |
| Approved classical services in #5331 boundary | Trusted Key Token firmware V1.3.02 | validated | Validated scope | Use only the algorithms and services listed in the public Security Policy; do not infer PQC validation. | 2026-07-19 |
| ML-KEM | Project-approved provider or service profile | pilot | Pilot / confirm per release | Parameter set, implementation, platform and validation evidence must be confirmed in the approved product capability matrix. | 2026-07-19 |
| ML-DSA | Project-approved provider or signing profile | pilot | Pilot / confirm per release | Publish exact parameter set, provider version, firmware and signed test corpus before production claim. | 2026-07-19 |
| SLH-DSA | Research or project profile | roadmap | Roadmap / research | No public production claim without approved implementation, performance and validation evidence. | 2026-07-19 |
| Hybrid classical + PQC signatures | Windows/.NET/Java and signing-service pilots | pilot | Pilot | Container/profile, composition rule, verifier behavior and fallback policy must be documented per use case. | 2026-07-19 |
| Windows CNG/KSP integration | Trusted PQC Windows Provider | pilot | Pilot | Support is version-specific; publish Windows build, provider build, application and algorithm profile in the interoperability matrix. | 2026-07-19 |
| PKCS#11 and Java JCA/JCE | Trusted PQC middleware providers | pilot | Pilot | Mechanisms, provider versions, JDK/runtime, token/HSM and application combinations require project validation. | 2026-07-19 |
| PAdES / CAdES / XAdES hybrid evidence | Document and remote-signing services | pilot | Pilot | Publish format profile, signed corpus, verifier matrix, LTV behavior and known limitations. | 2026-07-19 |
| PQC-aware CA / RA / VA / TSA transformation | Trusted PQC PKI and TSA services | pilot | Service + pilot | Architecture and migration services are available; specific PQC profiles are accepted only after policy, interoperability and evidence gates. | 2026-07-19 |
| Cryptographic discovery and readiness | QuantumSafe Discovery / CBOM / Risk | available | Available service | Deliverables include inventory, dependency map, risk priorities, target architecture and owned migration roadmap. | 2026-07-19 |
| Interoperability and benchmark assessment | Interoperability Lab / Benchmark Center | available | Available service | Results are tied to an environment manifest, test plan, product versions and reproducible evidence. | 2026-07-19 |
| macOS CryptoTokenKit | Apple platform integration track | roadmap | Roadmap | Subject to Apple platform capabilities, approved architecture, prototype results and release decision. | 2026-07-19 |
| QKD / QRNG integration | Partner and research track | research | Research / partner track | Position as an optional complementary technology; never imply that QKD replaces PQC signatures or PKI. | 2026-07-19 |