IBM z16 CPACF PQC — Qtonic Quantum Score 91.6/100 | Qtonic Quantum Lab

Back to Registry

API CheckingRegistry CheckingTrust Checking

IBM z16 CPACF PQC

Qtonic Quantum Reviewed

IBM

PlatformFIPS 140-3 #FIPS 140-3 Level 4 (z16 Crypto Express8S)CNSA 2.0

Evidence source: Live API

91.6

Rank unavailable

Score Radar

Overview

IBM z16 mainframe with CPACF (Central Processor Assist for Cryptographic Functions) provides hardware-accelerated PQC at FIPS 140-3 Level 4 — the highest certification level. It enables transparent PQC for z/OS workloads protecting the world most critical banking and government systems.

Algorithms

ML-KEM-768ML-KEM-1024ML-DSA-65ML-DSA-87

Languages

CJavaCOBOL

NIST Level3, 5

LicenseProprietary

Dimension Breakdown

Algorithm CorrectnessVerified

10/10

Verify email for evidence chains and agent vote details

PerformanceVerified

10/10

Verify email for evidence chains and agent vote details

Key & Ciphertext SizeVerified

8/10

Verify email for evidence chains and agent vote details

Side Channel ResistanceContested

9.9/10

Verify email for evidence chains and agent vote details

InteroperabilityVerified

4.2/10

Verify email for evidence chains and agent vote details

Standards ComplianceVerified

10/10

Verify email for evidence chains and agent vote details

MaturityVerified

9/10

Verify email for evidence chains and agent vote details

DocumentationVerified

8.1/10

Verify email for evidence chains and agent vote details

Supply ChainContested

10/10

Verify email for evidence chains and agent vote details

Quantum ResistanceContested

8.9/10

Verify email for evidence chains and agent vote details

▸Compliance Guidance

HIPAA

Suitable for ePHI in transit. Prioritize deployment on systems handling laboratory results, imaging, and patient communications — highest harvest-now risk under HIPAA.

PCI DSS 4.0.1

Aligns with PCI DSS 4.0.1 post-quantum requirements (2030 deadline). Strong candidate for card-present transaction encryption and cardholder data environments.

CNSA 2.0

Meets NSA CNSA 2.0 requirements for national security systems (2030-2033 mandate). Qualified for defense contractor and federal agency deployments. (partial alignment — verify with compliance team before production deployment)

FIPS 203/204/205

NIST-standardized. Fulfills FIPS compliance requirements for federal systems and regulated financial/healthcare environments.

QSolve builds your path to January 1, 2029 readiness.

Qtonic Quantum QSolve advisors work alongside your CISO, board, and compliance teams — selecting the right vendor from this registry, managing the competitive evaluation, and requiring quarterly PQC training through your 2029 readiness date.

Request an assessment →

Score History

Standards Compliance

FIPS 203 (ML-KEM)

NIST — Pass

FIPS 204 (ML-DSA)

NIST — Pass

FIPS 205 (SLH-DSA)

NIST — Fail

CNSA 2.0

NSA — Partial

NSM-10

White House — Pass

EO 14028

White House — Pass

PCI DSS 4.0.1

PCI SSC — Pass

HIPAA

HHS — Pass

GDPR

EU — N/A

POPIA

South Africa — N/A

PDPA

Singapore — N/A

LGPD

Brazil — N/A

Highlights

+IBM z16 CPACF PQC provides hardware-accelerated PQC at FIPS 140-3 Level 4, enabling transparent PQC for z/OS workloads protecting the world most critical banking and government systems.
+ML-KEM-768, ML-KEM-1024, ML-DSA-65, and ML-DSA-87 are supported algorithms at NIST Levels 3, 5, and 4 respectively.
+IBM z16 CPACF PQC is FIPS 140 Certified, ensuring robust security for banking and government systems.

Concerns

-Documentation is unavailable, limiting understanding of how the PQC solution works and its capabilities.

Last evaluated: May 23, 2026

Status: active

Published with audit trail

Want this analysis for IBM z16 CPACF PQC?

Start with QScout Free for a verified website snapshot, then scope Surface, Silver, or Gold when approved evidence is needed for inventory, roadmap, and remediation decisions.

Start QScout Free

Related Solutions

DigiCert PQ TLS Certificates

DigiCert

PlatformEvidence

ML-DSA-44ML-DSA-65ML-DSA-87+2

DigiCert offers post-quantum TLS certificates using ML-DSA and hybrid signature algorithms. As the largest enterprise certificate authority, DigiCert PQ certificate program enables organizations to test and pilot quantum-resistant certificate chains before broader migration.

N/A — certificate service

Last evaluated: May 23, 2026

Azure Key Vault PQ

Microsoft

PlatformEvidence

ML-KEM-768ML-DSA-65AES-256-GCM

Azure Key Vault with PQC key operations for enterprise key management.

Last evaluated: May 23, 2026

CryptoNext Security

CryptoNext Security

PlatformEvidence

ML-KEM-768ML-DSA-65AES-256-GCM

CryptoNext quantum-safe library and migration platform for European enterprises.

Last evaluated: May 23, 2026

Your vendors are not on this list?

We evaluate any PQC solution on request. Submit a vendor and we will add it to the Qtonic Quantum Lab registry within 48 hours.

Request an Evaluation