STMicroelectronics introduced the ST54M, the first member of its decade-old ST54 secure element family to integrate hardware-based post-quantum cryptography (PQC). The device combines NFC, a secure element, embedded eSIM support, and a dedicated K-Check hardware accelerator on a single die, supporting the NIST-standardized ML-KEM (key encapsulation mechanism) and ML-DSA (digital signature algorithm) algorithms from FIPS 203 and 204. The secure element runs an Arm Cortex-M35P processor with up to 4.5 MB secure nonvolatile memory and 800 kB of RAM, designed to meet Common Criteria EAL6+ and EMVCo requirements for payment, identity, and eSIM applications.
Unlike software-only PQC implementations, the ST54M performs both ML-KEM and ML-DSA operations via dedicated hardware, narrowing the performance gap with classical cryptography and avoiding user-experience degradation. The device retains full backward compatibility with all classical cryptographic algorithms from prior ST54 generations, supporting hybrid cryptography during the transition period. A new on-chip DC-DC converter (previously external) improves efficiency and reduces system cost, while improved RF performance enables smaller and frame antennas without loss of reading distance.
The motivation is the "harvest now, decrypt later" threat scenario: adversaries collect encrypted data today, then decrypt it once quantum computers mature (5–7 years projected). PQC-ready hardware now allows OEMs to deploy devices today without future redesigns when GSMA PQC-enabled eSIM standards finalize. ST54M was developed in response to customer demand from device manufacturers eager to protect long-lived assets. The timing aligns with NIST standards reaching maturity and enables OEMs to prepare for the next phase of mobile security standards.