IDEMIA certifies a bank card built to withstand future quantum computers
IDEMIA Secure Transactions announces the first EMVCo certification of a payment card platform that includes NIST post-quantum algorithms. Your payments aren't changing yet. Here's why.
Automated publication. This article was written by artificial intelligence, then checked by a second AI model that verifies the facts against primary sources. It was published without prior human review.
Translated from French by AI. The original French article is the reference version.
A bank card stays in a wallet for several years. The one a bank issues today will therefore still be in use when payment rules have adopted post-quantum cryptography, meaning algorithms designed to resist future quantum computers. IDEMIA Secure Transactions, the payment card arm of French group IDEMIA, is betting on that gap.
On October 29, the company announced it was the first to obtain an EMVCo certification for a payment card platform that provides access to post-quantum and "cryptographic agility" features. EMVCo is the body that sets the technical standards for payment chip cards worldwide.
What's inside the chip
According to IDEMIA's press release, the platform runs on Java Card, the operating system for smart cards, on a chip designed by the company and equipped with a hardware accelerator for post-quantum computations. The card's applications can call on its Sphere PQC library, which supports the algorithms standardized by NIST, the US standards institute, "including" ML-KEM, used to exchange keys, and ML-DSA, used for signatures.
Current payment applications keep working on the same card. It can also host other services: FIDO authentication (passwordless login), digital identity or loyalty programs, loaded at issuance or later.
Why your payments are not yet post-quantum
This is the point not to miss. The press release does not say that transactions are now protected by post-quantum cryptography. It presents these algorithms as tools the card "will be able to use as payment standards evolve." Likewise, the platform "paves the way" for quantum-resistant offline payments: that is a prospect, not a feature available today.
What is certified, then, is a card ready to switch when standards require it, and able to change algorithms without being replaced. That is the meaning of "cryptographic agility." Marc Bertin, chief technology officer of IDEMIA Secure Transactions, sums it up, speaking about banks: "The decisions they make today will determine how prepared their payment infrastructure is in the years to come."
What banks can take from it
For an institution planning its migration, this is a concrete example of what roadmaps recommend: build in the ability to change algorithms now in long-lifespan equipment, rather than waiting for a deadline. Our overview of the state of post-quantum cryptography in October 2026 covers the European timeline.
Unknowns remain. The press release gives no commercial launch date, no customer bank name and no EMVCo certificate reference. The next step to watch: post-quantum making its way into the payment specifications themselves.
Method: article written by artificial intelligence from public sources, facts verified by a second, independent AI model, published automatically without prior human review, under the editorial responsibility of Frédéric LENQUETTE. Spotted an error? Let us know. Our editorial policy.
Share this article
