Western Digital Corporation (WDC) has announced the integration of post-quantum cryptography (PQC) into its latest high-capacity Ultrastar® UltraSMR hard disk drives. The hardware, currently undergoing qualification with multiple hyperscale customers, is designed to address emerging security requirements for long-term data storage, particularly within artificial intelligence (AI) infrastructure.
As organizations increasingly rely on AI data systems that generate and retain massive datasets indefinitely, the industry is shifting its focus toward securing this data against future technological threats.
Western Digital’s deployment of National Institute of Standards and Technology (NIST)-approved quantum-resistant algorithms marks a transition from theoretical cryptographic planning to hardware-level implementation.
The Push for Quantum-Resilient Storage
The primary driver behind this integration is the growing urgency to protect accumulated data from threats that outpace current security architectures. Two main factors contribute to this vulnerability:
- Extended Hardware Lifecycles: Enterprise storage infrastructure typically remains in service for five years or more. This extended timeframe increases the likelihood that current hardware will still be in use when cryptographically relevant quantum computers become operational.
- Harvest Now, Decrypt Later (HNDL): This present-day threat involves adversaries collecting encrypted or signed data with the intention of decrypting it or forging security signatures once quantum capabilities mature.
Furthermore, device-level trust has become a critical focal point. Without quantum-resilient protections, a quantum-enabled adversary could potentially forge digital signatures on firmware updates, allowing malicious code to bypass standard security checks.
Implementation on the Ultrastar DC HC6100 UltraSMR
Western Digital’s PQC implementation on the new Ultrastar DC HC6100 UltraSMR prioritizes securing device-level trust—specifically firmware integrity and key management—over standard data-at-rest encryption. The system is designed to protect device trust chains from initial manufacturing through active field service.
Key technical elements of the implementation include:
- Algorithm Selection: The drives utilize ML-DSA-87 (NIST FIPS 204) for high-assurance code signing.
- Dual-Signing: The system combines the emerging PQC algorithm with the established RSA-3072 standard to ensure resilient, redundant security.
- Infrastructure Integration: Western Digital has deployed PQC-capable public key infrastructure (PKI) and hardware security module (HSM) workflows to manage key issuance, rotation, and lifecycle management.
- Operational Continuity: The architecture includes rollback safeguards designed to allow deployment across diverse server fleets without disrupting current operations.
As data protection at the infrastructure layer becomes a baseline requirement for AI-driven enterprises, Western Digital plans to expand its PQC capabilities across additional enterprise hard drive product lines in the future.
Dr. Xiaodong (Carl) Che, Chief Technology Officer and Senior Vice President at WD, said:
As AI data compounds and becomes more valuable and long-lived, securing it for the future is no longer optional. Quantum computing represents one of the most significant technology transitions of our time, and it is advancing faster than many organizations anticipate. The security architectures that have protected enterprise storage for more than a decade will need to evolve.
Integrating post-quantum cryptography into our Ultrastar enterprise-class drives is part of our commitment to helping customers stay ahead of threats that are already present in the form of HNDL attacks. By aligning with NIST standards and CNSA 2.0 today, we are helping enterprises build a clear, low-friction path to quantum-safe storage infrastructure.