Standards body GlobalPlatform launches Pavona, the first open-source silicon distribution with hardware-accelerated ML-KEM and ML-DSA post-quantum primitives and FIPS 140-3 / Common Criteria alignment, with founding members including Meta, Qualcomm, Tenstorrent, ZeroRISC, and Max Planck Institute for Security and Privacy

Score 6 — anchor §8.2 row 6 'Credible benchmark result with industry-wide implications.' Pavona is the first multi-vendor open-silicon PQC distribution shipping reference hardware for the post-FIPS-203/204 ML-KEM and ML-DSA primitives, the lattice-based primitives finalized by NIST in August 2024 as the migration-baseline asymmetric public-key cryptography for the post-quantum era. Per §8.2 'Trap 7 — Under-rating standards. Policy and standards events feel dry, but PQC standards activity is load-bearing for the CISO audience. Do not under-rate it.' The combination of (a) the participating-vendor mix (Meta, Qualcomm, Tenstorrent, ZeroRISC, Max Planck Institute for Security and Privacy is industrially substantial — Qualcomm's mobile-SoC footprint, Tenstorrent's AI-accelerator silicon, ZeroRISC's RISC-V root-of-trust positioning, and Meta's hyperscaler infrastructure span the four key consumer-cryptography deployment vectors), (b) the explicit FIPS 140-3 and Common Criteria alignment intent, and (c) the named 6–9× performance improvement over software-only baselines together cross the 'meaningful' threshold for industry-wide implications. Held at 6 not 7 because: (a) the announcement is a launch of an open-source distribution, not a certified shipping product — the FIPS 140-3 / Common Criteria certifications are explicitly named as alignment intent, not yet completed; (b) the customer deployment timeline (when the reference hardware moves from IP-block availability to shipping silicon in production devices at the founding-member companies) is not disclosed; (c) the Pavona distribution does not introduce a new PQC primitive — it provides hardware acceleration for ML-KEM and ML-DSA, which are NIST-standardized and already widely implemented in software. Held above 5 because the open-silicon distribution model is structurally novel and the founding-member coverage spans the production silicon supply chain for the consumer cryptography hardware market.

Three trackable second-order consequences. First, Pavona's open-silicon distribution model creates a downward price-and-time pressure on proprietary PQC IP-block vendors (Crypto Quantique, PQShield's silicon IP, Tropic Square) as the open-source alternative becomes commercially-quality available; the price erosion may compress the standalone PQC-IP market within the 12–18 month deployment window. Second, the FIPS 140-3 and Common Criteria alignment intent, if executed, sets a reference implementation against which proprietary PQC implementations will be benchmarked in CISO procurement processes — the open reference is a leverage point for buy-side negotiations. Third, the founding-member roster including hyperscaler (Meta), mobile silicon (Qualcomm), AI-accelerator silicon (Tenstorrent), and RISC-V root-of-trust (ZeroRISC) coverage suggests a coordinated supply-side response to the September 2025 NSA / CISA / NIST joint timeline for PQC migration in U.S. national-security systems — the hardware-side enablement is now being staged ahead of the 2030–2035 enterprise PQC migration deadline window.