WD's new enterprise drives are built to survive the quantum era
Western Digital has announced Ultrastar UltraSMR drives with built-in post-quantum cryptography, making them the first enterprise hard drives to implement a NIST-approved quantum-safe algorithm for firmware protection. The drives use ML-DSA-87, one of three standards formally released by NIST in August 2024. They are currently in qualification with hyperscale customers — no public pricing or launch date has been disclosed.
The threat
Today's encryption standards — RSA and ECC — rest on math problems that classical computers can't solve in any reasonable timeframe. A sufficiently powerful quantum computer could crack them in minutes. That future machine doesn't exist at commercial scale yet, but the threat it creates is already active.
Intelligence agencies and state-backed actors are harvesting encrypted data right now, banking on decrypting it once quantum hardware catches up — a strategy known as "harvest now, decrypt later." The NSA's CNSA 2.0 directive mandates ML-DSA-87 adoption for all new federal systems by 2025, and defense supply chains under DFARS and CMMC are already bound by quantum-safe requirements. For US government contractors and their cloud providers, this isn't a future problem.
What the drives actually do
The ML-DSA-87 algorithm doesn't encrypt user files. It protects the drive's firmware through digital code signing. If an attacker can replace the firmware on a storage device, they gain control of data before the operating system ever sees it. Locking down that trust chain — from manufacturing through field service — is the specific problem WD is solving here.
Because most data centers aren't ready to drop legacy systems overnight, WD uses a hybrid signing approach that pairs ML-DSA-87 with RSA-3072. The older algorithm maintains backward compatibility with existing infrastructure; the new one future-proofs the security layer. According to the WD press release, this dual-signing design is specifically aimed at hyperscale operators building infrastructure with a ten-year horizon.
First mover, limited field
No rival has announced a comparable product. Seagate and Samsung have not disclosed PQC-ready enterprise drives. That gives WD an early advantage in procurement conversations with US cloud giants and federal agencies — but the drives remain in qualification, meaning real-world deployment is still some months away.
For most consumers and small businesses, this is firmly enterprise territory. The significance sits upstream: the data centers that store cloud backups, financial records, and health information are the targets this technology is designed to protect.