Hybrid Classical and Post-Quantum Cryptography IP Core for Future-Proof Security
FortifyIQ’s Hybrid Cryptography IP core combines traditional asymmetric algorithms—such as RSA and ECC—with post-quantum standards including ML-KEM (Kyber) and ML-DSA (Dilithium)—in a single, efficient hardware module. Designed for applications requiring smooth migration to quantum-safe cryptography, it enables hybrid key exchange and digital signature schemes that meet both current and future security standards. Optimized for balanced power, area, and performance, the IP supports secure SoC integration with protections against side-channel and fault injection attacks, making it suitable for FIPS 140-3 and Common Criteria certification. Ideal for secure boot, firmware authentication, and long-lifecycle systems requiring cryptographic agility.
FortifyIQ’s Hybrid Cryptography IP core is a unified, high-efficiency hardware engine combining classical public-key cryptography (RSA and ECC) with post-quantum algorithms ML-KEM (Kyber) and ML-DSA (Dilithium), enabling hybrid cryptographic schemes which are compliant with emerging standards from NIST and other regulatory bodies. Designed for secure SoC integration, the IP offers a future-proof solution that maintains compatibility with current systems while preparing for the quantum threat.
The IP supports RSA signature verification (RSA-2048/4096) and ECC operations (ECDH/ECDSA over NIST P-192 to P-521), alongside full support for ML-KEM and ML-DSA at all standardized security levels. Hybrid operations, such as dual-signature schemes (ECDSA + ML-DSA) and combined key exchange (ECDH + ML-KEM) are supported via programmable control logic, allowing cryptographic agility based on security policy or operational mode.
A modular architecture includes high-speed arithmetic units: a patented modular multiplier for classical cryptography operations, an NTT engine for lattice-based PQC, and optimized hash accelerators for shared use across classical and PQC algorithms. This hardware reuse strategy achieves a balanced trade-off between performance, silicon area, and power consumption.
To support secure deployment in high-assurance applications, physical attack protections are available for sensitive operations involving private keys or intermediate values. These features support FIPS 140-3 and Common Criteria certification pathways.
Engineered to support secure boot, firmware validation, secure communications, and long-lifecycle devices, FortifyIQ’s Hybrid Cryptography IP core enables seamless transition to post-quantum security without sacrificing interoperability, efficiency, or certification readiness.