Protecting Quantum Era Cryptography. Today.
Compact and Secure Post-Quantum Key Encapsulation SW Library for Resource-Constrained Devices
As classical asymmetric encryption and secure key establishment algorithms face obsolescence in the quantum era, embedded systems require quantum-resistant alternatives that balance performance, code size, RAM size, and power consumption. FortifyIQ’s ML-KEM SW library answers this need with a compact and efficient implementation of the ML-KEM key encapsulation scheme, enabling secure shared key establishment, standardized in FIPS 203 based on the CRYSTALS-Kyber scheme. Designed for secure SoC integration, it supports all security levels of the ML-KEM algorithm and incorporates comprehensive protections against side-channel injection attacks. The IP core is engineered to meet or exceed rigorous certification standards, including FIPS 140-3 and Common Criteria, enabling future-proof authentication for secure embedded applications.
FortifyIQ’s ML-KEM SW library implements the ML-KEM key encapsulation algorithm, standardized in FIPS 203.
The implementation is algorithmically protected against SCA and FIA with a low overhead in performance and code size compared to a typical SW implementation without protections against SCA and FIA, and with significantly better performance than implementations with share-based protections. The protection is based on performing the sensitive parts of the calculations in a redundant domain.
The core supports all three ML-KEM security levels (ML-KEM-512, ML-KEM-768, and ML-KEM-1024), offering configurable performance and security trade-offs. For efficiency, the low-level protected functions used in the innermost loops are implemented in Assembly.
