TL;DR
Get business pricing on office and shipping supplies
- Business-only prices and quantity discounts
- Tax-exempt purchasing
- Multiple users, one account, clear invoices
Idemia says its Secure Transactions platform has received EMVCo certification, making it the first payment-card platform certified to provide access to post-quantum cryptography and crypto-agility services. The certification concerns the platform, not a claim that quantum-resistant cards are already deployed or that a quantum threat is imminent.
Idemia Secure Transactions says its payment-card platform has received EMVCo certification, a development the company describes as the first certification for a card platform providing access to post-quantum cryptography (PQC) and crypto-agility services. The certification gives banks and card issuers a certified platform option for preparing payment cards for future changes in cryptographic security, but does not mean quantum-resistant cards are already in widespread use.
The certified platform, called Idemia Secure Transactions (IST), combines access to PQC capabilities with services intended to let cryptographic systems adapt as security requirements change. Finextra reports that the platform was designed to provide the processing capacity and cryptographic flexibility needed for compatibility with existing and evolving payment infrastructure. EMVCo is the global body that develops standards for secure and interoperable card payments.
According to the report, IST includes a hardware post-quantum accelerator that allows applications to access Idemia’s Sphere PQC library. Idemia describes Sphere as a post-quantum algorithm library optimized for the constrained computing environment of payment cards. The platform also includes crypto-agility services, which are intended to support updates or changes to cryptographic approaches rather than tying a card program to one fixed approach.
Idemia says the design is intended to help banks protect existing card programs while preparing for possible quantum-resistant offline payments. The company also presents flexibility as a way to reduce the risk of technology lock-in. The available report does not identify the algorithms supported, give technical certification details, name participating banks, or say that any issuer has begun deploying cards based on the certified platform.
Preparing Card Security for Cryptographic Change
The announcement matters because payment cards are issued for use across a broad ecosystem of banks, terminals, processors and payment networks. Any security changes must work within that existing infrastructure, not only in a laboratory setting. EMVCo certification provides a standards-related milestone for Idemia’s platform, while the combination of PQC access and crypto-agility is aimed at giving issuers options as cryptographic requirements develop.
Quantum computing is a potential long-term challenge for some cryptographic methods used to protect information and verify identities. The source does not say that current payment cards have been broken, or that a quantum computer capable of doing so exists. Nor does certification by itself establish that every part of a payment system is protected against future quantum attacks. The practical relevance is that card platforms and issuer decisions made now can affect how readily security can be adapted later, while maintaining compatibility for customers using cards today.
For consumers, the announcement does not describe an immediate change to how they pay or a requirement to replace existing cards. For banks and issuers, it signals that a card platform designed to support PQC and cryptographic flexibility has passed an EMVCo certification process, although rollout choices and timelines remain with individual institutions.
Products Worth Considering
Apple iMac 2024 All-in-One Desktop with M4 Chip, 24‑inch Retina Display, 16GB Unified Memory, 256GB SSD, Silver
Apple MacBook Pro (14.2-inch, 2025) – M5 chip, 16GB Unified Memory, 1TB SSD, Space Black
Apple Mac mini (2026) with M5 Pro chip and 3-year AppleCare+
As an affiliate, we earn on qualifying purchases.
Why Card Platforms Are Planning Ahead
Payment cards rely on cryptographic methods for functions such as confidentiality, identity verification and message integrity. Finextra’s report says the development of quantum computing has prompted financial institutions and technology providers to consider whether some of those methods may need to change. It gives no date for when quantum computers might pose a practical threat to payment cryptography.
The report frames post-quantum cryptography and crypto-agility as preparation rather than a response to a confirmed breach. PQC refers to cryptographic approaches intended to withstand attacks by quantum computers; crypto-agility refers to the ability to change cryptographic methods as requirements evolve. In a payment-card setting, those capabilities also have to fit the card’s limited computing resources and remain usable with existing payment systems.
Idemia’s announcement is specifically about certification of the IST platform. It does not provide a broader assessment of the readiness of the payment industry, nor does it report a bank deployment or a change to EMVCo’s general payment-card standards.
““Post-quantum security is not a challenge banks can afford to address only when quantum computers become capable of breaking today’s cryptography.””
— Marc Bertin, CTO of Idemia Secure Transactions
Deployment and Threat Timelines Remain Open
The report does not state when quantum computers might threaten current payment cryptography, which specific algorithms the IST platform supports, or what testing was included in its EMVCo certification. It also does not identify banks that have selected the platform, set a commercial rollout date, or describe the costs and operational steps involved in adoption.
Certification should not be read as proof that payment cards or the wider payment ecosystem are already protected against every possible quantum attack. The source describes access to PQC and crypto-agility capabilities, but gives no independent technical evaluation or deployment results. It remains unclear how quickly issuers will adopt the platform and how compatibility will be maintained as cryptographic standards and infrastructure change.
Issuer Adoption Will Set the Pace
The next visible step is whether banks and card issuers choose to use the EMVCo-certified IST platform in card programs. The source gives no timeline for deployments, no customer or issuer commitments, and no stated schedule for further certification or product updates.
Further information from Idemia or participating issuers could clarify supported algorithms, implementation requirements, certification scope and plans for offline payments. Until those details emerge, the announcement establishes a certification milestone for the platform, not a broad rollout or a confirmed deadline for payment cards to change.
Key Questions
What did Idemia announce?
Idemia says its Secure Transactions platform received EMVCo certification. The platform provides access to post-quantum cryptography and crypto-agility services for payment-card applications.
Does the certification mean cards are already quantum-proof?
No. The report describes certification of a platform with PQC access and crypto-agility capabilities. It does not say that cards are already deployed or that the platform protects against every possible quantum attack.
What is crypto-agility?
Crypto-agility is the ability to update or change cryptographic methods as security requirements evolve. Idemia says its platform includes services intended to support that flexibility.
When could quantum computers threaten payment cards?
The source gives no date. It presents quantum computing as a potential future challenge and does not report that current payment cards have been compromised by quantum computing.
Have banks started using the certified platform?
The report does not name any banks using IST or provide a deployment schedule. Issuer adoption plans remain unclear.
Source: finextra.com
