Vendor & Product Reality

Thales's HSM and key-management portfolio is largely the product of its 2019 acquisition of Gemalto, which itself had earlier acquired SafeNet, bringing the Luna network HSM and authentication assets, the payShield payments HSM, and the broader digital-security business into a single portfolio. The Luna line, Luna Network HSM 7, Luna PCIe HSM 7, Luna USB HSM, Luna Cloud HSM, covers the spectrum from hyperscale data-center deployments to portable signing ceremonies, with FIPS 140-3 Level 3 validation, Common Criteria EAL4+ certification under multiple protection profiles, and qualification as a Qualified Signature/Seal Creation Device under eIDAS. payShield 10K is a widely deployed payments HSM in the global card-issuing and acquiring infrastructure, certified to PCI HSM, FIPS 140-3 Level 3, and bank-mandated regional schemes. CipherTrust Manager, with the CipherTrust Data Security Platform, layers enterprise key management, tokenization, application-layer encryption, and BYOK / HYOK orchestration on top of the HSM root of trust.

The deployment surface is enormous. Public certificate authorities anchor their issuing keys in Luna or equivalent HSMs; the offline root key ceremonies that bootstrap public trust hierarchies are conducted in Faraday-shielded rooms with Luna USB or PCIe modules. Code-signing for Microsoft, Apple, and Linux distribution chains routes through HSMs. Cryptocurrency custodians and tokenized-asset platforms hold customer key material in HSM-backed wallets. Card-scheme transactions across Visa, Mastercard, and regional networks routinely pass through payShield-class HSMs at issuer, acquirer, or scheme. National PKI deployments, eIDAS member states, US federal PIV, defense PKIs, use HSMs at every tier. Thales holds a leading market position in this estate, alongside Entrust (which now owns the former nCipher franchise), Utimaco, and AWS, Google, and Azure cloud HSM offerings.

Architectural Gap

The structural gap is not a critique of HSM engineering. Tamper-resistant hardware that generates keys inside its boundary, never exposes private material to software, and self-zeroizes under attack is exactly what stored-key cryptography needs. The gap is the architectural assumption that identity and authority must be anchored in stored key material at all. Three structural consequences follow from that assumption, and they persist no matter how good the HSM is.

First, the key continues to exist. It was generated inside the HSM and it remains there. Identity bound to the key depends on the continued existence of that key inside that hardware (or its replicas). Physical destruction, certification expiry, or vendor end-of-life of the device threatens the identity unless ceremonial backup procedures have replicated the key elsewhere, which by construction expands the surface of stored copies. Second, availability requirements drive replication. Production deployments cluster HSMs across availability zones and geographic regions, and the same key material is synchronized across multiple physical devices under wrapping protocols. Each replica is an additional location at which key material exists. The operational work of HSM cluster management, key ceremony documentation, hardware refresh cycles, and disaster recovery is itself part of the security surface, as every CA and payments operator who lives with it understands.

Third, and most consequential for the next decade, the cryptographic primitives the keys instantiate are RSA, ECDSA, and ECDH, algorithms whose security rests on the hardness of integer factorization and discrete logarithms in classical computational models. A cryptographically relevant quantum computer running Shor's algorithm reduces those primitives to polynomial-time problems. NIST has finalized the first wave of post-quantum standards (ML-KEM / FIPS 203, ML-DSA / FIPS 204, SLH-DSA / FIPS 205), and Thales, like every HSM vendor, has begun shipping firmware that supports post-quantum algorithms inside the same Luna and payShield enclosures. The migration cliff, however, is real and large: as publicly described in migration guidance, certificates, signing keys, and long-lived encryption keys across the global PKI / HSM estate are re-issued and re-rooted, and the dependent ecosystems re-validated. That cliff is a property of an identity model anchoring authority in a stored mathematical secret whose quantum resistance is a property of the algorithm rather than the architecture.

What the Primitive Provides

Adaptive Query's keyless-identity primitive is post-quantum by construction, not by algorithm choice. Identity in the primitive is not a stored secret protected by hardware; it is a continuously evolving function of behavioral continuity anchored in locally-sourced unpredictability: entropy that is generated, consumed, and committed forward in time without ever being persisted as a recoverable artifact. In the described embodiments there is no stored key to extract, because the security property does not derive from the difficulty of inverting a stored mathematical object. The primitive is therefore independent of the Shor / Grover threat model that governs the lifetime of RSA, ECC, and pairing-based deployments in the current HSM estate.

The architectural consequence is qualitative. An identity that does not depend on a stored key is not organized around the key-management lifecycle: in the described embodiments there are no rotation ceremonies, no replication-across-availability-zones, no PQC migration cliff, and no certification-expiry-equals-identity-expiry coupling. The primitive composes naturally with hardware that produces high-quality entropy, but the entropy is a one-time contribution to the evolving identity rather than a stored secret that must be protected for the identity's lifetime.

Concretely, as disclosed, a device or agent expresses identity as a trust slope: a cumulatively validated sequence of dynamic hashes, each computed as a successor of the prior step under an update rule that folds in at least one unpredictability contribution and a non-repeating volatile salt. The disclosure enumerates three interoperable ways to source that unpredictability, so a skilled implementer can build the approach on constrained or rich hardware alike. In a hardware-anchor embodiment, a static device identifier (for example a TPM, TEE, or SoC identifier, and by extension a certified HSM random source) is combined with a per-epoch volatile salt through a keyed derivation. In a local-state embodiment, locally observable signals (monotonic counters, high-resolution timing deltas, scheduler jitter, I/O micro-jitter, and similar) are projected into a stability-tuned vector and passed through a strong extractor to yield a bounded token. In a hybrid embodiment, both contributions are concatenated in the same successor computation, and failure of either is sufficient to reject the step. A receiver validates a presented successor against locally retained trust-slope state under policy-bounded continuity checks, with no certificate authority, registry, or long-lived keypair in the acceptance path. Related embodiments in the disclosure cover two-stage message authentication that binds identity at both transport and payload layers, append-only lineage logs with periodic anchors for delayed and sparse verification, predictive drift detection, entropy-anchor rotation with forward links, quorum-based recovery after memory loss, and an isolated fallback adapter for interoperability with legacy PKI. Security reduces to the min-entropy of the per-step contribution and the preimage resistance of the employed hashes, so a quantum adversary running amplitude-amplification search obtains only a quadratic speedup, and parameter selection in the range of 256 to 512 bit outputs preserves a conservative margin.

Composition Pathway

Composition with Thales's portfolio is additive across two axes. On the entropy axis, Luna and payShield HSMs already contain certified hardware random number generators that are some of the most carefully validated in the industry; those generators are an excellent source of the locally-sourced unpredictability the keyless-identity primitive consumes. The HSM contributes entropy to the identity-derivation process without being asked to store the resulting identity, which is a workload the device is well-suited to perform and which extends rather than displaces its existing role. CipherTrust Manager, as the policy and orchestration layer, is a natural integration point for managing the cross-organizational governance of which behavioral-continuity domains a given identity participates in.

On the migration axis, the primitive offers a forward path that does not require ripping out the installed base. Existing HSM-rooted PKI continues to operate for the workloads where stored-key identity is appropriate, code signing, document signing, payments-rail authentication where regulatory frameworks specifically require a key-bound credential. New workloads, and renewal cycles for existing workloads where the regulatory framework permits, can adopt keyless identity without inheriting the PQC migration cliff. Hybrid deployments, where a keyless identity and a stored-key credential co-exist during a transition window, are a natural fit for CipherTrust's existing multi-credential orchestration capabilities.

Commercial & Licensing

Thales's commercial position in the post-quantum decade is strengthened by participating in an identity primitive that is structurally PQC-native rather than waiting for each algorithm migration to complete inside the existing key-bound model. The HSM estate retains its role as the regulated root of trust for the workloads that require one; the keyless-identity primitive is the upgrade path for the workloads where the architectural assumption of stored key material has become a liability rather than a feature. Licensing engagement with Thales, and symmetrically with Entrust, Utimaco, and the cloud HSM operators, is the natural path: the patent positions the primitive at the layer above the HSM, where the customer's identity model lives, rather than competing with the hardware franchise the HSM vendors have spent two decades building.

The regulatory environment is moving in the same direction. NIST's PQC migration guidance under NSM-10, the European Union's PQC roadmap coordinated through ENISA, the UK NCSC's published migration timelines, and the financial-sector deadlines emerging from the Bank for International Settlements all point at the same uncomfortable horizon: the installed PKI / HSM estate migrates, the migration is multi-year, and any architectural option that reduces the migration surface is commercially valuable. Workloads that genuinely call for key-bound credentials still migrate under a keyless-identity primitive; what the primitive offers is a smaller population of workloads that traverse the cliff, and it gives the HSM vendors an aligned story for the renewal cycles where customers are asking "do we re-anchor in a stored key at all?" The answer Thales can offer with the primitive is that for some workloads the right answer is yes and the HSM remains the right hardware, and for others the right answer is no and the HSM contributes entropy to a different identity model. Either way, the customer's purchase order continues to flow.

Disclosure Scope

The invention described here, the keyless memory-native identity primitive and its embodiments, is disclosed in United States Patent Application 19/388,580. All statements in this article about what the primitive does, how identity is formed as a trust slope from locally sourced unpredictability, how successors are validated without stored keypairs or certificate authorities, and its post-quantum posture, are grounded in that filing. References to Thales and its Luna, payShield, and CipherTrust product lines, to other named vendors such as Entrust and Utimaco, and to standards, certifications, and regulatory programs (FIPS 140-3, PCI HSM, Common Criteria, eIDAS, NIST PQC, NSM-10, ENISA, NCSC) are provided as external market and technical context to situate the comparison. Those references describe third-party products, standards, and programs accurately to the best of available public information; they are not claims of the filing, and no affiliation with or endorsement by any named party is implied. Product names and trademarks belong to their respective owners. The comparison is architectural: it addresses the axis of stored-key versus keyless identity that the disclosure provides, and it does not assert defect or deficiency in the engineering of any named product.