Western Digital Integrates Post-Quantum Cryptography into Ultrastar HDDs for AI Data Security

WD Integrates Post-Quantum Cryptography into High-Capacity Ultrastar HDDs

These drives are currently in qualification with multiple hyperscale customers, reflecting strong early interest in quantum-resilient storage architectures. Western Digital Corporation announced a significant step in next-generation infrastructure security with the integration of post-quantum cryptography (PQC) into its newest high-capacity Ultrastar® UltraSMR hard disk drives. As AI infrastructure evolves from compute-centric deployments to data systems that persistently retain information across every inference, training run, and interaction, the durability and security of that data becomes foundational, not optional. These drives are currently in qualification with multiple hyperscale customers, reflecting strong early interest in quantum-resilient storage architectures.

Western Digital integrates post-quantum cryptography into new enterprise hard drives

Western Digital Corporation (WDC) has announced the integration of post-quantum cryptography (PQC) into its latest high-capacity Ultrastar® UltraSMR hard disk drives. The hardware, currently undergoing qualification with multiple hyperscale customers, is designed to address emerging security requirements for long-term data storage, particularly within artificial intelligence (AI) infrastructure. As organizations increasingly rely on AI data systems that generate and retain massive datasets indefinitely, the industry is shifting its focus toward securing this data against future technological threats. Western Digital's deployment of National Institute of Standards and Technology (NIST)-approved quantum-resistant algorithms marks a transition from theoretical cryptographic planning to hardware-level implementation. The primary driver behind this integration is the growing urgency to protect accumulated data from threats that outpace current security architectures. Two main factors contribute to this vulnerability: Furthermore, device-level trust has become a critical focal point. Without quantum-resilient protections, a quantum-enabled adversary could potentially forge digital signatures on firmware updates, allowing malicious code to bypass standard security checks. Western Digital's PQC implementation on the new Ultrastar DC HC6100 UltraSMR prioritizes securing device-level trust -- specifically firmware integrity and key management -- over standard data-at-rest encryption. The system is designed to protect device trust chains from initial manufacturing through active field service. Key technical elements of the implementation include: As data protection at the infrastructure layer becomes a baseline requirement for AI-driven enterprises, Western Digital plans to expand its PQC capabilities across additional enterprise hard drive product lines in the future. Dr. Xiaodong (Carl) Che, Chief Technology Officer and Senior Vice President at WD, said:

WD Launches Industry's First Post-Quantum Cryptography Hard Drives to Secure AI Data

Ultrastar® HDDs currently in customer qualification introduce PQC-ready secure boot and firmware protection, establishing a new standard for device trust in the Quantum Era Western Digital Corporation (Nasdaq: WDC), the storage foundation of the AI-driven data economy, today announced a significant step in next-generation infrastructure security with the integration of post-quantum cryptography (PQC) into its newest high-capacity Ultrastar® UltraSMR hard disk drives. As AI infrastructure evolves from compute-centric deployments to data systems that persistently retain information across every inference, training run, and interaction, the durability and security of that data becomes foundational, not optional. These drives are currently in qualification with multiple hyperscale customers, reflecting strong early interest in quantum-resilient storage architectures. AI data systems generate and retain massive, long-lived data sets. Securing that data over decades, not just years, must be a core requirement of modern infrastructure. WD's launch of the first hard drives to implement NIST-approved quantum-resistant algorithms marks a definitive industry transition -- from theoretical planning to deployed hardware-level defense. By hardening the root of trust, WD provides a critical safeguard against threats like harvest now, decrypt later (HNDL) and similar attacks. This helps protect the massive data lakes fueling today's AI innovations against the cryptographic protection-breaking power of tomorrow's quantum computers. WD is among the first to bring post-quantum cryptography into production storage infrastructure, helping lead the industry's quantum transition with deployed, standards-aligned, infrastructure-level protection, setting a new baseline for trust in AI-era data systems. Why Post-Quantum Storage Security Matters Now As AI infrastructure and workloads generate and retain data in perpetuity, the value of that accumulated data grows, and so does the urgency to protect it against threats that are advancing faster than most organizations anticipate. * Long data lifecycles and extended IT service windows widen vulnerabilities. Enterprise storage infrastructure typically remains in service for five years or longer, a timeframe that may overlap with the emergence of cryptographically relevant quantum computers. * As decryption capabilities advance, so do the strategies of sophisticated adversaries. HNDL is a present-day threat. Adversaries may collect encrypted or signed data today with the intent to decrypt or forge security signatures once quantum capabilities mature. Organizations must begin to prepare for long-term cryptographic resilience today. * Firmware-level attacks present a critical risk. Device-level trust is becoming increasingly important as security architectures evolve. A quantum-enabled adversary could potentially forge digital signatures on firmware updates, allowing malicious code to appear authentic and compromising drive security. WD's PQC Implementation WD's PQC implementation on the new Ultrastar DC HC6100 UltraSMR is designed to help protect device trust chains from manufacturing through field service. This implementation represents more than a feature enhancement; it reflects a broader shift toward embedding quantum-resilient security directly into the foundation of data infrastructure. The focus is on securing device-level trust, including firmware integrity and key management, rather than data-at-rest encryption. Key elements include: * Algorithm selection: ML-DSA-87 (NIST FIPS 204) for high-assurance code signing, with dual-signing using RSA-3072 combining proven and emerging cryptographic standards to ensure strong, resilient security * Infrastructure readiness: PQC-capable public key infrastructure (PKI) and hardware security module (HSM) workflows deployed to support key issuance, rotation, and lifecycle management * Operational continuity: Dual-signing and rollback safeguards designed to support deployment across diverse fleets without disrupting current operations "As AI data compounds and becomes more valuable and long-lived, securing it for the future is no longer optional. Quantum computing represents one of the most significant technology transitions of our time, and it is advancing faster than many organizations anticipate. The security architectures that have protected enterprise storage for more than a decade will need to evolve," said Dr. Xiaodong (Carl) Che, Chief Technology Officer and Senior Vice President at WD. "Integrating post-quantum cryptography into our Ultrastar enterprise-class drives is part of our commitment to helping customers stay ahead of threats that are already present in the form of HNDL attacks. By aligning with NIST standards and CNSA 2.0 today, we are helping enterprises build a clear, low-friction path to quantum-safe storage infrastructure." As quantum security requirements advance, data protection at the infrastructure layer is becoming a baseline requirement for AI-driven enterprises. WD is helping define the next baseline for trust in AI infrastructure, where security is embedded at the foundation of the system, not added as an afterthought. WD expects to expand PQC capabilities across additional enterprise hard drive product lines over time.