FIQ-PQC04B Hybrid Classical and Post-Quantum Cryptography

Technical Overview

FortifyIQ’s Hybrid Cryptography IP core is a unified, high-efficiency hardware engine combining classical public-key cryptography (RSA and ECC) with post-quantum algorithms ML-KEM (Kyber) and ML-DSA (Dilithium), enabling hybrid cryptographic schemes which are compliant with emerging standards from NIST and other regulatory bodies. Designed for secure SoC integration, the IP offers a future-proof solution that maintains compatibility with current systems while preparing for the quantum threat.

The IP supports RSA signature verification (RSA-2048/4096) and ECC operations (ECDH/ECDSA over NIST P-192 to P-521), alongside full support for ML-KEM and ML-DSA at all standardized security levels. Hybrid operations, such as dual-signature schemes (ECDSA + ML-DSA) and combined key exchange (ECDH + ML-KEM) are supported via programmable control logic, allowing cryptographic agility based on security policy or operational mode.

A modular architecture includes high-speed arithmetic units: a patented modular multiplier for classical cryptography operations, an NTT engine for lattice-based PQC, and optimized hash accelerators for shared use across classical and PQC algorithms. This hardware reuse strategy achieves a balanced trade-off between performance, silicon area, and power consumption.

To support secure deployment in high-assurance applications, physical attack protections are available for sensitive operations involving private keys or intermediate values. These features support FIPS 140-3 and Common Criteria certification pathways.

Engineered to support secure boot, firmware validation, secure communications, and long-lifecycle devices, FortifyIQ’s Hybrid Cryptography IP core enables seamless transition to post-quantum security without sacrificing interoperability, efficiency, or certification readiness.