Post-quantum cryptography (PQC) chips — SEALSQ/WISeKey vs the incumbents; the stacked-narrative microcap pattern

Built from research/macro-pqc-chips.json (web-verified: NIST CSRC, SEALSQ/WISeKey press, StockTitan, MarketsandMarkets, Infineon/NXP/Thales). Vendor press flagged. Companion to macro-crqc-quantum-landscape, macro-quantum-computing, fin-sealsq-wisekey-global.

Frame. The real PQC market (post NIST FIPS 203/204/205) is growing but incumbent-dominated. SEALSQ/WISeKey are speculative microcaps stacking three narratives — quantum + space + crypto/AI — and monetizing via equity dilution and partnership press. They also touch the digital-ID/PKI layer (WISeKey is a PKI/identity firm), which is why they recur across the project's threads.

1. The real market (mandated migration)

• NIST finalized FIPS 203 (ML-KEM), 204 (ML-DSA), 205 (SLH-DSA) on Aug 13 2024 — a real, mandated migration driver (federal systems must move off RSA/ECC).
• Size: PQC market ~$0.42B (2025) → ~$2.84B (2030), ~46% CAGR (MarketsandMarkets).
• Incumbents who actually ship: Infineon (SLC27 controller, CC-certified ML-KEM/ML-DSA, first-mover), NXP, STMicroelectronics (secure-MCU PQC 2026), Thales (co-developed a standardized algorithm; Luna HSMs with FIPS 203/204/205), plus IDEMIA, Entrust, PQShield, AWS, DigiCert. The migration is real; the value largely accrues to incumbents.

2. The stacked-narrative microcap pattern

SEALSQ (LAES) / WISeKey are the case study in the project's recurring "stacked-narrative microcap" pattern: combine quantum + space + crypto/AI into one story, issue partnership/press at a high cadence, and fund the venture through equity dilution rather than PQC product revenue. Real PQC need ≠ value accrual to these names. Graded REAL-need / weak-accrual / dilution-financed — see fin-sealsq-wisekey-global for the financing detail.

2b. Who profits from the mandated migration (added 2026-06-16)

The corpus's real-need-vs-manufactured-demand lens, applied to post-quantum. The migration is genuinely necessary and a deadline-driven, population-scale compliance-capex event. Mandate/price-tag/funding facts verified; the "forecast-divergence-as-tell" and narrative-beta framing labeled.

• The mandate forces the spend: NIST (deprecate 2030 / disallow 2035), NSA CNSA 2.0 (2027/2030/2035), the Quantum Computing Cybersecurity Preparedness Act (2022) + OMB M-23-02 crypto-inventory requirement, EU DORA/NIS2 (inventories by end-2026). Deadlines convert security into a procurement line.
• The federal price tag: the White House/OMB report to Congress (Aug 2024) estimates ~$7.1 billion for federal civilian agencies to migrate over 2025–2035 — and that excludes DoD/IC, so true government spend is higher.
• The forecast divergence is the tell: "the PQC market" is quoted anywhere from $2.84B by 2030 (MarketsandMarkets, ~46% CAGR) to ~$30B by 2034 (Precedence, ~38%) to ~$19B by 2034 (~49%) to ~$15B by 2035 (~39%). An order-of-magnitude spread for adjacent horizons = a narrative, not a measurement — the same forecast-fog around every bubble theme.
• Who profits:
• Real shipping: Microsoft SymCrypt (ML-KEM/ML-DSA in production; AD CS ML-DSA cert GA May 2026) + AWS KMS (PKI backends); DigiCert (PQC certs + crypto-discovery); Entrust (ML-DSA in nShield HSMs); Thales (first quantum-resistant smart card, Oct 2025; SafeNet Luna HSM); Infineon/NXP/STMicro (CC-certified secure elements).
• IP/specialist: PQShield (~$37M Series B, >$60M total; embedded in AMD/Microchip/Toyota — real depth); SandboxAQ (HQC co-author, Alphabet spinout) — $5.75B valuation on ~$18M ARR (~320×), the PQC narrative-beta poster child.
• Consultancies: Deloitte/Accenture/IBM — the crypto-inventory-and-remediate annuity.
• Narrative microcaps: SEALSQ/WISeKey (QS7001) — real chip, narrative-stacked, dilution-funded (§2).
• Real vs hype: REAL = the $7.1B-floor mandate, the FIPS standards, and the shipping backends/HSMs/cards/certs. HYPE = the divergent TAMs, the ~320× SandboxAQ multiple, the stacked microcaps. Uniquely, this froth is backed by law (deadlines + inventory mandates), so incumbents and consultancies — not the microcaps — capture most of the spend.
• Ties to the thesis: this is the financial face of the digital-ID post-quantum argument (digitalid-orchestration-real-incentive → the PQC-escape-hatch rebuttal): the mandated migration is both necessary security and a vendor-captured windfall that entrenches the same rail-builders (Oracle/Microsoft PKI, SEALSQ) — "just migrate to PQC" pays the incumbents to harden the control rail.

3. The digital-ID overlap

WISeKey is a PKI/identity company, so the PQC-chip thread overlaps the digital-ID/PKI control-layer (digitalid-corporate, digitalid-orchestration-real-incentive) — the same actors recur where identity infrastructure, "post-quantum" branding, and microcap financing meet.

4. Why on-thesis

PQC is where the quantum-threat narrative meets the chip and digital-ID layers — a real standards-driven market wrapped in a speculative-equity skin. Cross-ref macro-crqc-quantum-landscape, macro-quantum-computing, fin-sealsq-wisekey-global, digitalid-corporate.

Sources: NIST — PQC FIPS approved; MarketsandMarkets — PQC market; Infineon PQC; SEALSQ/WISeKey press (vendor-flagged).

← Research index · structured data: macro-pqc-chips.json · macro-pqc-chips.md