Purism announced its PQC Encryptor line of products in August 2025, one year to the month after the NIST approved ML-KEM Post-Quantum Cryptography FIPS 203 standard was published.
Purism installed and recorded the test-harness at two DOE/NNSA facilities traversing between Las Vegas Nevada and Albuquerque New Mexico. This is a first-known live installation of PQC Encryptors between two long-haul sites showcasing 10Gbps line-rate speeds with negligible latency and maximum throughput compared to cleartext.
Full length video demonstration of the Purism Librem PQC Encryptor:

Purism demonstrated:
A NIST standardized FIPS 203 ML-KEM implementation showcasing Post-Quantum Cryptography (PQC) for Data In Transit (DIT) at Line Rate Speeds with Low Overhead (60 byte/frame), Low Latency (<1ms), Low Jitter (<1ms), with No Packet Loss (0 bits).
FIPS 203 is a NIST standard for a quantum-safe key encapsulation mechanism designed to secure communications against quantum computer attacks. It was finalized by NIST on August 13, 2024, and is part of a set of post-quantum cryptography standards.
ML-KEM is a Module Lattice (ML) based cryptographic algorithm that offers a Key Encapsulation Mechanism (KEM) utilizing a public key to be shared and secret key to be held. It ensures confidentiality in the presence of eavesdroppers and against quantum computers.
Post-Quantum Cryptography (PQC), also referred to as quantum-proof, quantum-safe, or quantum-resistant, uses cryptographic algorithms that are secure against a cryptanalytic attack from a quantum computer.
Data In Transit (DIT), also known as data in motion, refers to digital information that is actively being transmitted over a network. It is important to secure this data to protect it from unauthorized access or interception during transmission.
Purism’s Librem PQC Encryptor takes everything coming in on the port and makes it quantum safe for delivery. We do not include any information from the cleartext frame – there is no addressing information or other metadata exposed. All internal cleartext addressing is carried in the encrypted payload.


Two Librem PQC Encryptors offers drop-in PQC into an existing network, one at each end. Add more for a one-to-many topology.