FEDQUANTUM SIGNAL 007
HARDWARE SECURITY + PQC · OCTOBER 2026
Post-quantum security is moving into the silicon.
Microsoft, Oracle and Marvell are collaborating on an open hardware-security architecture designed to bring cryptographic protection closer to the computing workloads it secures. Known as Project Tessera, the initiative signals a potentially important shift in the quantum transition: post-quantum readiness is beginning to influence the design of cloud and AI infrastructure itself, rather than remaining solely a migration challenge for existing systems.
THE SIGNAL · WHY IT MATTERS · WHAT TO WATCH · FEDQUANTUM VIEW
THE SIGNAL
The cryptographic foundation of computing infrastructure is beginning to change.
Microsoft has introduced Project Tessera, an initiative to advance open-source integrated hardware security module technology in collaboration with Marvell and Oracle through the Open Compute Project. The effort seeks to bring hardware-protected cryptographic operations closer to the processors and systems they serve, potentially reducing the complexity and limitations associated with traditional approaches to managing cryptographic keys and security services.
The initiative also introduces an important post-quantum dimension. Microsoft and Marvell have demonstrated interoperability between separate HSM implementations using post-quantum cryptography to secure communications between them. Although broader adoption and implementation remain ahead, the demonstration illustrates how quantum-resistant security can be incorporated into the foundational architecture of next-generation computing systems.
The larger development is not simply the introduction of another security technology. Some of the world's most influential infrastructure companies are collaborating on how cryptographic trust should be built into the next generation of computing hardware.
WHY IT MATTERS
Cryptographic trust is becoming an infrastructure design decision.
For much of the post-quantum discussion, the emphasis has been on identifying vulnerable algorithms, inventorying cryptographic assets and developing migration strategies. Those activities remain essential, particularly for federal agencies and large enterprises managing complex environments that may take years to modernize.
Project Tessera introduces a complementary perspective. As cloud platforms, AI infrastructure and increasingly autonomous systems expand, the mechanisms protecting cryptographic keys, authenticating machines and securing communications are becoming more closely connected to the underlying hardware architecture. Embedding stronger cryptographic capabilities into that infrastructure could help establish more consistent security foundations across future computing environments.
The implications extend beyond hyperscalers. Federal agencies increasingly depend on commercial cloud platforms, advanced processors, software ecosystems and interconnected infrastructure to support mission-critical workloads. If post-quantum security becomes a native capability of that infrastructure, quantum readiness will increasingly influence technology architecture, procurement and long-term platform decisions—not simply cybersecurity migration plans.
WHAT TO WATCH
Watch whether open hardware security becomes an industry standard.
The most important next development will be the extent to which Project Tessera moves beyond initial demonstrations toward broadly adopted specifications, interoperable implementations and production deployments. Participation by additional cloud providers, semiconductor companies and hardware manufacturers would provide an early indication of whether integrated cryptographic security is becoming a common architectural foundation.
The open-source dimension also deserves attention. Industry standards can accelerate adoption and interoperability, but they can also reshape where technology companies differentiate. As more cryptographic protection becomes available through standardized hardware capabilities, enterprises may place greater emphasis on visibility, policy management, crypto-agility and the ability to coordinate security across multiple platforms.
For federal technology leaders, the question is whether these developments begin influencing cloud-security requirements, hardware acquisition, cryptographic modernization and the design of high-security computing environments. The answer will help determine whether post-quantum readiness remains primarily a migration initiative or becomes an increasingly routine requirement of infrastructure modernization.
FEDQUANTUM VIEW
The quantum transition is beginning to change how computing infrastructure is built.
For years, post-quantum security has largely been discussed as a future cryptographic challenge requiring organizations to prepare for the eventual arrival of sufficiently capable quantum computers. That challenge remains, but the industry's response is beginning to extend beyond replacing vulnerable algorithms.
Project Tessera suggests that major technology providers are starting to incorporate quantum resilience into the foundational technologies that protect digital identities, credentials and communications. Its open architecture also raises the possibility that cryptographic security could become more standardized across the hardware platforms supporting cloud computing, advanced AI and other critical infrastructure.
This does not eliminate the need for cryptographic discovery, migration planning or enterprise-wide security management. Indeed, as organizations operate across increasingly diverse combinations of legacy systems, cloud platforms and new hardware architectures, understanding and managing their cryptographic environments may become even more important.
The post-quantum transition is no longer only about changing the cryptography inside existing systems. It is beginning to influence how the next generation of systems is designed.
SOURCES & FURTHER READING
This Signal draws primarily on Microsoft's announcement of Project Tessera and the collaboration involving Microsoft, Marvell, Oracle and the Open Compute Project. FedQuantum's analysis considers the potential implications for post-quantum readiness, cloud infrastructure and the future architecture of cryptographic security. FedQuantum's analysis and conclusions are independent.
MICROSOFT AZURE
Advancing Hardware Security with Open-Source Integrated HSM Technology — October 2026
Microsoft's announcement introducing Project Tessera, its proposed open hardware-security architecture, and the use of post-quantum cryptography in interoperability demonstrations.
OPEN COMPUTE PROJECT
Open Compute Project — Industry Collaboration and Open Infrastructure
Information about the collaborative framework supporting open specifications and interoperable technologies across data-center and computing infrastructure.