Western Digital Corporation announced a significant step in next-generation infrastructure security with the integration of post-quantum cryptography (PQC) into its newest high-capacity Ultrastar UltraSMR hard disk drives. As AI infrastructure evolves from compute-centric deployments to data systems that persistently retain information across every inference, training run, and interaction, the durability and security of that data become foundational, not optional. These drives are currently in qualification with multiple hyperscale customers, reflecting strong early interest in quantum-resilient storage architectures.
AI data systems generate and retain massive, long-lived data sets. Securing that data over decades, not just years, must be a core requirement of modern infrastructure. WD’s launch of the first hard drives to implement NIST-approved quantum-resistant algorithms marks a definitive industry transition — from theoretical planning to deployed hardware-level defense. By hardening the root of trust, WD provides a critical safeguard against threats like harvest now, decrypt later (HNDL) and similar attacks. This helps protect the massive data lakes fueling today’s AI innovations against the cryptographic protection-breaking power of tomorrow’s quantum computers. WD is among the first to bring post-quantum cryptography into production storage infrastructure, helping lead the industry’s quantum transition with deployed, standards-aligned, infrastructure-level protection, setting a new baseline for trust in AI-era data systems.
Why post-quantum storage security matters now
As AI infrastructure and workloads generate and retain data in perpetuity, the value of that accumulated data grows, and so does the urgency to protect it against threats that are advancing faster than most organisations anticipate.
- Long data lifecycles and extended IT service windows widen vulnerabilities. Enterprise storage infrastructure typically remains in service for five years or longer, a timeframe that may overlap with the emergence of cryptographically relevant quantum computers.
- As decryption capabilities advance, so do the strategies of sophisticated adversaries. HNDL is a present-day threat. Adversaries may collect encrypted or signed data today with the intent to decrypt or forge security signatures once quantum capabilities mature. Organisations must begin to prepare for long-term cryptographic resilience today.
- Firmware-level attacks present a critical risk. Device-level trust is becoming increasingly important as security architectures evolve. A quantum-enabled adversary could potentially forge digital signatures on firmware updates, allowing malicious code to appear authentic and compromising drive security.
WD’s PQC implementation
WD’s PQC implementation on the new Ultrastar DC HC6100 UltraSMR is designed to help protect device trust chains from manufacturing through field service. This implementation represents more than a feature enhancement; it reflects a broader shift toward embedding quantum-resilient security directly into the foundation of data infrastructure. The focus is on securing device-level trust, including firmware integrity and key management, rather than data-at-rest encryption.
Key elements include:
- Algorithm selection: ML-DSA-87 (NIST FIPS 204) for high-assurance code signing, with dual-signing using RSA-3072 combining proven and emerging cryptographic standards to ensure strong, resilient security
- Infrastructure readiness: PQC-capable public key infrastructure (PKI) and hardware security module (HSM) workflows deployed to support key issuance, rotation, and lifecycle management
- Operational continuity: Dual-signing and rollback safeguards designed to support deployment across diverse fleets without disrupting current operations
“As AI data compounds and becomes more valuable and long-lived, securing it for the future is no longer optional. Quantum computing represents one of the most significant technology transitions of our time, and it is advancing faster than many organisations anticipate. The security architectures that have protected enterprise storage for more than a decade will need to evolve,” said Dr. Xiaodong (Carl) Che, Chief Technology Officer and Senior Vice President at WD. “Integrating post-quantum cryptography into our Ultrastar enterprise-class drives is part of our commitment to helping customers stay ahead of threats that are already present in the form of HNDL attacks. By aligning with NIST standards and CNSA 2.0 today, we are helping enterprises build a clear, low-friction path to quantum-safe storage infrastructure.”
As quantum security requirements advance, data protection at the infrastructure layer is becoming a baseline requirement for AI-driven enterprises. WD is helping define the next baseline for trust in AI infrastructure, where security is embedded at the foundation of the system, not added as an afterthought. WD expects to expand PQC capabilities across additional enterprise hard drive product lines over time.
Discussion about this post