Post-quantum cryptography (PQC) and a non-extractable TPM key address different security problems. PQC uses algorithms designed to withstand attacks from quantum computers; non-extractability is a key-custody property intended to keep a secret within a protected hardware boundary. A TPM can help protect a PQC key, but that depends on the specific TPM, firmware, software and supported algorithms—not simply on having a TPM.
What does “non-extractable TPM key” mean?
A non-extractable key is generated, stored and used within a protected hardware environment so the host processor cannot access the secret in ordinary operation. A TPM can provide that kind of boundary for supported keys and operations. NIST describes this model for authentication keys in SP 800-63B.
As an Amazon Associate I earn from qualifying purchases.
The goal is to make it harder for compromised host software to copy or leak the secret. “Non-extractable” is not a guarantee against every attack: it does not, on its own, establish a device’s resistance to physical attacks, implementation flaws, compromised firmware, or misuse by authorized software.
Recommended Free Tools
What does post-quantum cryptography change?
PQC refers to cryptographic algorithms designed to resist attacks by future quantum computers. NIST finalized three relevant standards in August 2024:
#1 Best Overall
- Compatible with TPM-M R2.0
- Chipset: Infineon SLB9665
- PIN DEFINE:14Pin
- Interface:LPC
- Please check the Pinout of mainboard at the official website and make sure it compatible with the pinout of TPM module before purchasing, thank you.
| Standard | Algorithm | Purpose |
|---|---|---|
| FIPS 203 | ML-KEM | Key establishment: two parties use it to establish a shared secret. It is not a general-purpose data-encryption algorithm; the resulting secret can be used with symmetric cryptography. |
| FIPS 204 | ML-DSA | Digital signatures. |
| FIPS 205 | SLH-DSA | Digital signatures using a stateless hash-based scheme derived from SPHINCS+. |
NIST’s announcement explains the three standards and their roles: FIPS 203, 204 and 205.
ML-KEM parameter sets and status
FIPS 203 specifies ML-KEM-512, ML-KEM-768 and ML-KEM-1024, ordered from lower to higher security strength and, correspondingly, higher to lower performance. NIST says ML-KEM is currently believed secure against adversaries with a quantum computer. That assessment is about the algorithm, not a guarantee about any particular TPM implementation.
Rank #2
- TPM 2.0 module for Asus motherboard.
- TPM 2.0 module chip 2.0mm pitch, 2x7P, 14 pin security module
- LPC 14 Pin for AsusTPM chip is better compatible with DDR4 memory module of motherboard, built in support memory type higher than DDR3! Supported states may vary by motherboard specification.
- Note: Don't support laptops and motherboards prior to X99; Don't support DDR3 memory.
- Packing list:1x TPM 2.0 Module for ASUS
The FIPS 203 page includes a November 17, 2025 planning note about an issue to correct in a future update. Check the page’s errata before making a conformance claim. The FIPS 204 page lists a July 31, 2026 planning note about minor issues for a future revision; consult its current status when evaluating compliance.
Can a TPM store post-quantum keys?
At the standards level, TPM specifications now include PQC support. The Trusted Computing Group (TCG) announced TPM 2.0 Library Specification version 1.85 with ML-KEM support, including Endorsement Keys, and ML-DSA support, including Attestation Keys. That establishes a specification capability, not support in every TPM or computer.
Rank #3
- TPM 2.0 module for ASROCK motherboard.
- TPM 2.0 module chip 2.0mm pitch, 2x9P, 18 pin security module for ASROCK
- LPC 18 Pin for TPM chip is better compatible with DDR4 memory module of motherboard, built in support memory type higher than DDR3! Supported states may vary by motherboard specification.
- Note: Don't support laptops and motherboards prior to X99; Don't support DDR3 memory.
- Packing list:1x TPM 2.0 Module for ASROCK
TCG’s PC Client Platform TPM Profile 1.07, published March 23, 2026, adds PQC-related requirements, including larger data transport for the CRB interface and provisions for ML-KEM Endorsement Key certificates. See the TCG announcement and profile resource.
Whether a particular machine can generate, retain and use a PQC key inside its TPM depends on the exact hardware and software stack. A standards version alone does not prove that the chip, firmware, operating system, host stack or application implements the relevant features.
Rank #4
- Compatible with ASUS motherboards with 20-1 pin TPM header; Please check your motherboard manual to confirm the presence of a 20-1pin TPM header before purchasing. Not compatible with ASUS X570-P or other models with other TPM header
- TPM 2.0 module 2.54mm pitch, 2x10P, 20-1 pin security module
- LPC 20-1Pin for AsusTPM chip is better compatible with DDR4 memory module of motherboard, built in support memory type higher than DDR3! Supported states may vary by motherboard specification.
- Note: Don't support laptops and motherboards prior to X99; Don't support DDR3 memory.If you are unsure whether your motherboard is compatible with our TPM module, please verify with us before making a purchase. Thank you.
- Packing list:1x TPM 2.0 Module for ASUS (Doesn't fit the connector on a ASUS Prime X570-P motherboard)
Is your TPM post-quantum ready?
Do not infer PQC readiness from the presence of a TPM 2.0 label. TCG distinguishes TPMs that are PQC-ready from those that may be upgradeable to meet the newer profile. TCG’s readiness explainer is a starting point, but a platform-level determination needs model-specific evidence.
Free tools Windows power users keep installed
One-click scans. No signup required.
Ask the platform or TPM vendor for:
- The exact TCG TPM Library Specification version and PC Client Platform TPM Profile version implemented.
- Supported algorithms, parameter sets and commands, including which key types and operations execute within the TPM.
- Firmware version, upgrade path and provenance, plus any applicable security validation.
- Certificate, endorsement-key and attestation support for the relevant PQC algorithms.
- Transport limits and compatibility with the computer’s host stack, operating system, libraries and intended applications.
- How keys are provisioned, recovered, migrated and retired without weakening the intended custody controls.
Then confirm that the application’s protocols and certificates actually use the supported algorithms. Hardware capability is only one part of a working PQC deployment.
Best Value
- TPM modules are suitable for GIGABYTE for Windows 11 motherboards.
- Some motherboards require a TPM module inserted or an update to the latest BIOS to enable the TPM option.
- 12Pin Remote Card Encryption Security Module Is Easy To Use, No Complicated Procedures Are Required, And It Can Be Used Immediately After Installation.
- Interface: LPC
- Packing list:1x TPM 2.0 Module for GIGABYTE
What a TPM boundary does not do
The TPM’s boundary concerns custody and handling of secret material; PQC concerns the mathematical construction used for cryptographic operations. One does not imply the other. Moving an existing RSA or elliptic-curve key into a TPM may change how that key is protected, but it does not turn it into a post-quantum key.
Likewise, an allowed key representation is not proof of hardware support. NIST’s PQC FAQ, revised June 16, 2026, says that key-generation seeds may be acceptable alternative key-pair or private-key formats in FIPS 203 and FIPS 204 modules under specified internal key-generation conditions. That does not establish that a given TPM stores or operates on a seed securely. See the NIST PQC FAQ for the conditions.
Plan the migration across the whole system
A PQC-ready TPM is not a complete migration. The cryptographic algorithm, key custody, certificates, communication protocol, application libraries and operational procedures all need to work together. Build the transition around the keys and protocols that need protection, and verify the complete path from key creation through use, rotation and recovery.
Quick wins for a faster PC:
Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Clear out junk files and repair common Windows errorsFree Scan →Scan for outdated or missing drivers - takes under a minuteDriver Scan →Quick Recap
- Inventory where RSA and elliptic-curve cryptography is used, including certificates, device identity, attestation and network protocols.
- Identify which operations need key establishment and which need signatures; ML-KEM and ML-DSA or SLH-DSA serve different purposes.
- Validate algorithm and parameter-set compatibility across the TPM, firmware, operating system, libraries, certificate infrastructure and applications.
- Test provisioning, authentication, updates, revocation, recovery and migration procedures before relying on the new path.
- Keep claims separate: algorithm choice, non-extractability, certification and whole-system security each require their own evidence.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
