Western Digital Integrates Post-Quantum Cryptography into Ultrastar HDDs for AI Data Security

Western Digital Launches Industry-First PQC-Enabled Drives

Western Digital Corporation has taken a definitive step in securing next-generation AI infrastructure by integrating post-quantum cryptography into its newest high-capacity Ultrastar HDDs. The Ultrastar DC HC6100 UltraSMR drives represent the first production storage hardware to implement NIST-approved quantum-resistant algorithms, transitioning from theoretical cryptographic planning to deployed hardware-level defense 1

1

3

3

. These PQC-enabled drives are currently undergoing qualification with multiple hyperscale customers, reflecting strong early interest in quantum-resilient storage solutions that can protect massive AI data lakes against future quantum computing threats 2

2

.

Addressing the Harvest Now, Decrypt Later Threat

The urgency behind this deployment stems from a present-day threat that many organizations underestimate. Adversaries are already collecting encrypted data with the intent to decrypt it once quantum capabilities mature, a strategy known as harvest now, decrypt later. Enterprise storage infrastructure typically remains in service for five years or longer, a timeframe that may overlap with the emergence of cryptographically relevant quantum computers [3](https://cxotoday.com/media-coverage/wd-l aunches-industrys-first-post-quantum-cryptography-hard-drives-to-secure-ai-data/). As AI infrastructure evolves from compute-centric deployments to data systems that persistently retain information across every inference, training run, and interaction, the durability and security of that data becomes foundational 1

1

. By hardening the root of trust at the device level, Western Digital provides a critical safeguard to secure AI data against the cryptographic protection-breaking power of tomorrow's quantum computers.

Technical Implementation Focuses on Device-Level Trust

Western Digital's implementation prioritizes securing device-level trust, specifically firmware integrity and key management, rather than standard data-at-rest encryption. The system is designed to protect device trust chains from initial manufacturing through active field service 2

2

. Key technical elements include ML-DSA-87, which follows NIST FIPS 204 standards for high-assurance code signing, combined with dual-signing using RSA-3072 to merge proven and emerging cryptographic standards 3

3

. The infrastructure readiness extends to PQC-capable public key infrastructure and hardware security module workflows deployed to support key issuance, rotation, and lifecycle management. Without quantum-resilient protections, a quantum-enabled adversary could potentially forge digital signatures on firmware updates, allowing malicious code to bypass standard security checks and compromise drive security 2

2

.

Building Quantum-Resilient Storage Architectures for the Quantum Era

Dr. Xiaodong (Carl) Che, Chief Technology Officer and Senior Vice President at WD, emphasized that quantum computing represents one of the most significant technology transitions of our time, advancing faster than many organizations anticipate. By aligning with NIST-approved algorithms and CNSA 2.0 today, Western Digital aims to help enterprises build a clear, low-friction path to quantum-safe storage infrastructure 3

3

. As data protection at the infrastructure layer becomes a baseline requirement for AI-driven enterprises, Western Digital plans to expand its post-quantum cryptography capabilities across additional enterprise hard drive product lines in the future 2

2

. This deployment of quantum-resilient storage solutions into production environments positions Western Digital among the first to lead the industry's quantum transition with deployed, standards-aligned, infrastructure-level protection, setting a new baseline for trust in next-generation AI infrastructure systems.