...
Contact Us

Protecting Quantum
Era Cryptography

Today

Why Current Cryptography Is at Risk

Classical public-key algorithms such as RSA and ECC will become insecure once large-scale quantum computers are available. Attackers are already harvesting encrypted data today to decrypt later, once quantum computers become powerful enough to break these algorithms.

Post-Quantum Cryptographic Solutions

  • ML-KEM – FIPS 203
    for key encapsulation.
  • ML-DSA – FIPS 204 
    for digital signatures.
  • SLH-DSA – FIPS 205
    as a stateless hash-based signature alternative.
  • XMSS, LMS,
    and HSS/XMSS‑MT -NIST SP 800‑208
    stateful hash-based schemes

These algorithms provide strong security against both current and future
 quantum attacks while enabling secure 
digital communication and authentication.

Problems with Standard Solutions

While post-quantum algorithms are mathematically resistant to quantum attacks, their implementations are highly vulnerable to physical attacks, including SCA/FIA attacks, sometimes exploitable with only a single trace.

Masking-based protection methods significantly increase performance, area, and power costs, and many such implementations have already been broken in academia.

The FortifyIQ Difference

FortifyIQ’s algorithmic hardening uses a mathematical model that provides certifiable SCA/FIA resistance without the overhead  of masking.

 
*patent-pending

We validate our products from netlist and FPGA through silicon and software, using Welch’s TVLA methods and real-world attack testing. Our high-assurance security is grounded in mathematical and algorithmic protections, with independent verification and/or certification by SGS Brightsight, Applus+, and SERMA.  

Meets FIPS 203, 204, 205, NIST SP 800-208, and ETSI TS 103 619. FIPS 140-3 Levels 3,4, Common Criteria AVA_VAN.5, SESIP level 5.

Available as hardware IP, software libraries, or hybrid CryptoBoxes and roots of trust (including Caliptra-compatible compact and tunable RoTs), with PQC + classical cryptography for the migration period.

Compatible with existing RSA/ECC systems on legacy devices.

Secures any device or system, from
the smallest embedded controller to large-scale computing infrastructure,
without compromising efficiency.

Our SCA/FIA-hardened PQC software libraries (ML-KEM, ML-DSA) let you deploy quantum-safe security today on current devices to counter ongoing harvest-now/decrypt-later threats.

Start with our SCA/FIA and cache-attack hardened PQC or classical software libraries and migrate to our SCA/FIA-resistanthardware IP whenever ready, with zero changes to your application stack.

Both hardware and software PQC libraries are fully FOTA/OTA updateable, enabling in-field mitigation of newly discovered attacks.

FortifyIQ’s PQC hardware IP and cryptographic subsystems are delivered as soft macros, enabling technology-node and foundry independence.

The FortifyIQ Difference

FortiPQC Post-Quantum Cryptography Implementations

Outstanding PPA

FortifyIQ’s algorithmic hardening uses a mathematical model that provides certifiable SCA/FIAresistance without the overhead  of masking.

 

 

*patent-pending

Validated security

We validate our products from netlist and FPGA through silicon and software, using Welch’s TVLA methods and real-world attack testing. Our high-assurance security is grounded in mathematical and algorithmic protections, with independent verification and/or certification by SGS Brightsight, Applus+, and SERMA. 

Compliant by design

Meets FIPS 203, 204, 205, NIST SP 800-208, and ETSI TS 103 619. FIPS 140-3 Levels 3,4, Common Criteria AVA_VAN.5, SESIP level 5.

Flexible deployment

Available as hardware IP, software libraries, or hybrid CryptoBoxes and roots of trust (including Caliptra-compatible compact and tunable RoTs), with PQC + classical cryptography for the migration period.

Seamless migration to PQC

Compatible with existing RSA/ECC systems on legacy devices.

Secures any device or system

Secures any device or system, from
the smallest embedded controller to large-scale computing infrastructure,
without compromising efficiency.

Immediate PQC protection

Our SCA/FIA-hardenedPQC software libraries (ML-KEM, ML-DSA, SLH-DSA, XMSS, XMSS-MT, LMS, LMS/HSS) let you deploy quantum-safe security today on current devices to counter ongoing harvest-now/decrypt-later threats.

Unified API for effortless HW migration

Start with our SCA/FIA and cache-attack hardened PQC or classical software libraries and migrate to our SCA/FIA-resistanthardware IP whenever ready, with zero changes to your application stack.

End-to-End Crypto-Agility

System-wide crypto-agility, with algorithms, parameter sets, and protections OTA/FOTA updatable in the field, even for hardware PQC implementations

Silicon‑process‑agnostic

FortifyIQ’s PQC hardware IP and cryptographic subsystems are delivered as soft macros, enabling technology-node and foundry independence.
FortiPQC Software_Libraries icon

FortiPQC
Cryptographic Libraries

FortiPQC-SW
Learn More
FortiPQC Hardware Solutions icon

FortiPQC
Hardware Solutions

FortiPQC-HW
Learn More
SGS certification logo
FortifyIQ AES Algorithm
AVA_VAN.5 Evaluation & Validation Summary
SGS Brightsight Common Criteria Laboratory
“Summary. The leakage analysis (Welch t-test) on over 30 million traces did not show statistically significant first- and second-order differences between trace sets with fixed and random inputs. The template-based DPA analysis, on the pseudo-random trace set for the profiling phase (15 million traces) and on a sub-set of 300k fix input traces for matching phase targeting the first-round S-box output, and template attack on ciphertext, did not indicate any potential information leakage.”
“The results for the soft IP presented in the report were obtained on the TOE which is the basic hardware implementation of the soft IP without additional levels of security (e.g. that are present in a secure silicon layout). Therefore the internal strength of the soft IP itself was evaluated. This indicates that the investigated features and parameters of the soft IP implementation should be robust against SCA and fault injection attacks in different implementations including ASIC. Nevertheless, according to the Common Criteria rules, the strength of the final composite product must be evaluated on its own”
Request Technical Details