Compact and Secure Post-Quantum Key Encapsulation SW Library for Resource-Constrained Devices
As classical asymmetric encryption and secure key establishment algorithms face obsolescence in the quantum era, embedded systems require quantum-resistant alternatives that balance performance, code size, RAM size, and power consumption. FortifyIQ’s ML-KEM SW library answers this need with a compact and efficient implementation of the ML-KEM key encapsulation scheme, enabling secure shared key establishment, standardized in FIPS 203 based on the CRYSTALS-Kyber scheme. Designed for secure SoC integration, it supports all security levels of the ML-KEM algorithm and incorporates comprehensive protections against side-channel injection attacks. The IP core is engineered to meet or exceed rigorous certification standards, including FIPS 140-3 and Common Criteria, enabling future-proof authentication for secure embedded applications.
• Requires an external true random number generator (TRNG)
Hardware accelerator for the same algorithm
Post-quantum signature accelerator, typically paired with ML-KEM for key exchange
Complementary PQC library for digital signatures
Integrated hardware set including ML-KEM and ML-DSA with classical crypto
Root of Trust with post-quantum security and SCA/FIA protection
