PaychainX References and Standards

Post-quantum mandate and standards

[1]

Executive Order, Securing the Nation Against Advanced Cryptographic Attacks The White House, June 22, 2026. Directs the federal transition to NIST PQC: key establishment by Dec 31, 2030, digital signatures by Dec 31, 2031, FAR contractor compliance by 2030. whitehouse.gov/presidential-actions/2026/06/securing-the-nation-against-advanced-cryptographic-attacks

[2]

FIPS 203, Module-Lattice-Based Key-Encapsulation Mechanism (ML-KEM) NIST, finalized Aug 13, 2024. The standard PaychainX reserves for post-quantum key establishment (pq_kem: ml-kem). csrc.nist.gov/pubs/fips/203/final

[3]

FIPS 204, Module-Lattice-Based Digital Signature Standard (ML-DSA) NIST. The signature standard PaychainX reserves for the hybrid audit envelope (pq_sig: ml-dsa). csrc.nist.gov/pubs/fips/204/final

[4]

FIPS 205, Stateless Hash-Based Digital Signature Standard (SLH-DSA) NIST. An alternative hash-based PQC signature scheme, relevant to cryptographic agility. csrc.nist.gov/pubs/fips/205/final

[5]

NIST Post-Quantum Cryptography project Program page for the standardization effort and migration guidance. csrc.nist.gov/projects/post-quantum-cryptography

Cryptographic primitives used in the gateway

[6]

FIPS 180-4, Secure Hash Standard (SHA-256, SHA-512) NIST. The hash functions behind the SHA-256 audit proof and the SHA-512 PQ envelope hash. csrc.nist.gov/pubs/fips/180-4/final

[7]

FIPS 198-1, The Keyed-Hash Message Authentication Code (HMAC) NIST. The construction behind the gateway's HMAC-SHA512 envelope signature and HMAC-signed webhooks. csrc.nist.gov/pubs/fips/198-1/final

[8]

FIPS 186-5, Digital Signature Standard (DSS) NIST. The classical digital-signature standard referenced by the federal order. csrc.nist.gov/pubs/fips/186-5/final

[9]

FIPS 140-3, Security Requirements for Cryptographic Modules NIST. The Cryptographic Module Validation Program standard the order cites for accelerated validation. csrc.nist.gov/pubs/fips/140-3/final

Payments security and standards

[10]

PCI Data Security Standard (PCI DSS) PCI Security Standards Council. The baseline for protecting account data, the framework PaychainX tokenization is designed to reduce scope against. pcisecuritystandards.org/standards/pci-dss

[11]

EMV Payment Tokenisation EMVCo. The framework for replacing the PAN with a token, the basis of stored-credential token references. emvco.com/emv-technologies/payment-tokenisation

[12]

EMV 3-D Secure EMVCo. Cardholder authentication framework relevant to risk and liability in card-not-present flows. emvco.com/emv-technologies/3-d-secure

[13]

ISO 20022 The global financial-messaging standard underpinning modern settlement and reporting. iso20022.org

Processor, partner, and infrastructure stack

[14]

CyberSource The live card-rail processor behind PaychainX authorizations. cybersource.com

[15]

Propelr PaychainX pilot partner. A full-service payment processing provider, directly integrated with Visa, whose terminal and retail context maps into the gateway. propelrpay.com

[16]

Elavon PaychainX is a registered MSP/ISO of Elavon, and of Visa and Mastercard. elavon.com

[17]

PAX Technology (A920 Pro) The smart terminal used for card-present, omnichannel acceptance. paxtechnology.com

[18]

Zero Hash PaychainX settlement partner. Zero Hash provides the digital-asset settlement infrastructure under the PaychainX stablecoin rails (B2C nearing production, B2B in design). zerohash.com

[19]

PaychainX, official site The PaychainX company site and domains, paychainx.com and paychainx.ai. paychainx.com

Third-party marks. CyberSource, Visa, Mastercard, Elavon, PAX, Propelr, and Zero Hash are the property of their respective owners and are referenced for identification only. Their inclusion does not imply endorsement. Standards documents are published by NIST, the PCI Security Standards Council, EMVCo, and ISO respectively.