CIQ’s NSS Module Achieves CAVP Certification for Post-Quantum Security
CIQ’s Leap into Post-Quantum Cryptography
February 4, 2026 – Reno, Nevada – CIQ has proudly announced that its Network Security Services (NSS) for Rocky Linux (RLC) 9.6 has been certified by the Cryptographic Algorithm Validation Program (CAVP). This marks the first time an Enterprise Linux distribution boasts a module with NIST-approved post-quantum cryptography (PQC) algorithms.
CIQ sees this achievement as a significant stride toward full FIPS 140-3 validation for Rocky Linux. The NSS module incorporates two key PQC algorithms: ML-KEM for secure key exchanges and ML-DSA for digital signatures. These tools are designed to withstand both classical and quantum attacks.
A Pathway to Quantum Safety
Under the guidance of CIQ’s Distinguished Engineer, Jeremy Allison, the NSS module underwent refinements to align with FIPS compliance, making the code open source in nss-3.112. This ensures fortified security as we advance into a quantum future.
With urgent guidelines from the NSA’s CNSA 2.0, organizations are urged to transition to quantum-resistant cryptography, with milestones set for 2027 and completion by 2035. The risk of “harvest now, decrypt later” strategies emphasizes immediate action.
Building a Quantum-Resistant Future
NSS supports crucial cryptographic functions for browsers and Java applications in FIPS mode. Gregory Kurtzer, CEO of CIQ, highlights the importance of quantum-resistant infrastructures, paving the way for OpenSSL and other modules.
CIQ is pushing forward across its FIPS cryptographic modules, including OpenSSL and GnuTLS, as PQC capabilities develop. The NSS with ML-KEM and ML-DSA is available for Rocky Linux users, with CIQ’s FIPS compliance code accessible on GitHub.
Stay informed on CIQ’s journey to quantum safety by checking updates on the NIST Validation Program and exploring open-source resources on GitHub. Embrace the future confidently.
Ready to take data security seriously?
Discover how Qsentinel can protect your organization against ransomware, enforce true data sovereignty, and stay ahead of the quantum threat. Their purpose-built workspace is designed for exactly that.
Get daily news in your inbox
The lastest on Hacks, ransomware attacks, post quantum security and more

