At Penguin Securities, our expertise extends beyond regulated digital asset and capital markets services into the underlying technologies that secure digital finance. We actively contribute to the open standards that the Internet depends on through our participation in the Internet Engineering Task Force (IETF). Our Chief Security Officer, Tomofumi Okubo, recently co-authored RFC 9629, an IETF Proposed Standard that defines how Key Encapsulation Mechanism (KEM) algorithms — including the quantum-secure algorithms used in post-quantum cryptography (PQC) — can be used within the Cryptographic Message Syntax (CMS), a foundational framework that underpins widely deployed security protections such as S/MIME, digital signatures, and signed software.

As the migration to post-quantum cryptography gains momentum, this work helps establish the practical and interoperable foundations that organisations will rely upon to protect sensitive information and maintain trust in digital systems over the long term. For digital asset markets, tokenised capital market products, and institutional custody solutions, robust cryptographic infrastructure is fundamental to security, resilience, and operational integrity.

Our involvement in the development of international cryptographic standards reflects our commitment to supporting the evolution of secure digital finance and preparing for emerging technological risks, including those posed by future quantum computing capabilities. We are proud to contribute to post-quantum cryptography in the open, consensus-driven tradition of the IETF and to support the standards that underpin the Internet and the next generation of digital financial infrastructure.

Read RFC 9629 →

About Penguin Securities

Penguin Securities, a Singapore-based financial services provider, a Capital Market Services Licence holder — regulated by the Monetary Authority of Singapore (MAS) to provide dealing in capital markets products, including Securities, Collective Investment Schemes, and Derivatives Contracts. In addition, Penguin Securities has applied regulatory approval to provide digital payment token services in Singapore. The firm offers tailored financial solutions to accredited and institutional investors and, through a separate subsidiary, provides institutional-grade digital asset derivative products. Penguin Securities remains committed to innovation, security, and maintaining high standards of regulatory compliance.