Â鶹¹ÙÍø

Future-Proofing security for the quantum era

Quantum computers use the law of quantum physics to process data at speeds far beyond what today¡®s computers can achieve. While this brings tremendous opportunities, it also poses a significant risk: one day, quantum computing could break the public key cryptography algorithms (RSA, ECDSA) that secure online transactions today. To address this challenge, Infineon is at the forefront of research and standardization, collaborating with the academic community, industry partners, and government agencies to deve-lop and promote post-quantum cryptography (PQC) standards.

In 2024, Infineon made a huge step toward a quantum resistant world. We received the world¡¯s first Common Criteria EAL6+ certification for a security controller comprising the secured implementation of a post-quantum cryptography (PQC) algorithm.

pqc-timeline-2
pqc-timeline-2
pqc-timeline-2

In addition, from 2025 on, Infineon PSOC? microcontrollers (MCUs) are compliant with PQC requirements for firmware verification outlined in the Commercial National Security Algorithm (CNSA) Suite 2.0, easing companies¡¯ transition to increased security in the quantum era.

A particular concern is the ?Harvest-Now-Decrypt-Later¡° scenario, where adversaries store encrypted data for decryption once a powerful enough quantum computer becomes available¡ªpotentially as early as 2030-2035. This emerging reality makes post-quantum cryptography (PQC) essential for protecting long-term digital assets across finance, government, and healthcare sectors. Industries already understand the urgency of post-quantum cryptography so they can protect their assets beyond the next decade.

Q day
Q day
Q day

PQC standardization

The migration to post-quantum security requires a strong consensus on the deployed algorithms and a high level of trust in their security. After an almost decade-long public evaluation and selection process, the US National Institute of Stan-dards and Technology (NIST) published in 2024 the first standards for quantum cryptography. By standardizing one key encapsulation algorithm (ML-KEM), two general-purpose signature schemes (ML-DSA, SLH-DSA) as well as two special-purpose signature schemes (XMSS, LMS), important cryptographic services within public key infrastructure can now be realized in a quantum-secured way.

Key challenges in PQC ¨C and how Infineon addresses them

Computational challenge
Computational challenge
Computational challenge

PQC algorithms require more resources, such as memory, than traditional public key cryptography. Additionally, the key and signature sizes of PQC algorithms are significantly larger, which can impact data transfer time. For example, the key sizes for PQC algorithms can be several kilobytes, compared to the few hundred bits required for traditional elliptic curve cryptography. This can be a challenge for constrained devices and can lead to higher bandwidth requirements and increa-sed latency to the point where it renders the device useless.

Infineon¡¯s approach to overcoming the PQC computational challenge

We have implemented a flexible hardware accelerator with side-channel protection and increased the RAM size of our products. This allows for more efficient processing of PQC algorithms, reducing the computational overhead and enabling faster execution times without compromising security.?Our products are designed to support the efficient implementation of PQC schemes such as?LMS/XMSS,?ML-KEM (Kyber) and ML-DSA (Dilithium), which have been standardized according to NIST. By providing optimized hardware and software solutions, we are helping to mitigate the computational intensity of PQC schemes and are thus enabling the widespread adoption of PQC.

Implementing PQC in a secured way is still a highly challenging task. While PQC algorithms are mathematically designed to withstand attacks from quantum computers, their complex structure and larger key sizes make them vulnerable to fault- and side-channel attacks during operation. While traditional cryptography has benefited from decades of harden-ing against these attacks, PQC is a relatively young research area. Implementing PQC in a secured way requires deep un-derstanding of the underlying math as well as expertise in secured implementation technique.

How Infineon tackles the PQC implementation challenge

Infineon offers TEGRION with Integrity Guard 32 and side-channel protected hardware accelerator to enable efficient and secured implementations. In 2025, we become world¡®s first company to receive Common Criteria EAL6, an industry- leading level of certification, for the secured implementation of a post-quantum cryptography algorithm on our TEGRION security controller.

Implementation challenge
Implementation challenge
Implementation challenge
transition challenge
transition challenge
transition challenge

Post-quantum security solutions are not simple drop-in replacements for existing protocols. Changes in protocols and a transition period with e.g. hybrid schemes (combining classical cryptography and PQC, as well as shipping products al-ready today with the possibility of in-field updates) are necessary for a smooth transition. This means that organizations will need to invest time and resources into updating their protocols and systems to support PQC, which can be a complex and time-consuming process.

Infineon¡¯s advancements help tackle transition challenge

We already provide a flexible hardware platform and software building blocks to enable hybrid schemes and in-field up-dates. Additionally, our team brings expertise and competence in implementing quantum cryptography, further enhan-cing our capabilities.

Computational challenge
Computational challenge
Computational challenge

PQC algorithms require more resources, such as memory, than traditional public key cryptography. Additionally, the key and signature sizes of PQC algorithms are significantly larger, which can impact data transfer time. For example, the key sizes for PQC algorithms can be several kilobytes, compared to the few hundred bits required for traditional elliptic curve cryptography. This can be a challenge for constrained devices and can lead to higher bandwidth requirements and increa-sed latency to the point where it renders the device useless.

Infineon¡¯s approach to overcoming the PQC computational challenge

We have implemented a flexible hardware accelerator with side-channel protection and increased the RAM size of our products. This allows for more efficient processing of PQC algorithms, reducing the computational overhead and enabling faster execution times without compromising security.?Our products are designed to support the efficient implementation of PQC schemes such as?LMS/XMSS,?ML-KEM (Kyber) and ML-DSA (Dilithium), which have been standardized according to NIST. By providing optimized hardware and software solutions, we are helping to mitigate the computational intensity of PQC schemes and are thus enabling the widespread adoption of PQC.

Implementing PQC in a secured way is still a highly challenging task. While PQC algorithms are mathematically designed to withstand attacks from quantum computers, their complex structure and larger key sizes make them vulnerable to fault- and side-channel attacks during operation. While traditional cryptography has benefited from decades of harden-ing against these attacks, PQC is a relatively young research area. Implementing PQC in a secured way requires deep un-derstanding of the underlying math as well as expertise in secured implementation technique.

How Infineon tackles the PQC implementation challenge

Infineon offers TEGRION with Integrity Guard 32 and side-channel protected hardware accelerator to enable efficient and secured implementations. In 2025, we become world¡®s first company to receive Common Criteria EAL6, an industry- leading level of certification, for the secured implementation of a post-quantum cryptography algorithm on our TEGRION security controller.

Implementation challenge
Implementation challenge
Implementation challenge

transition challenge
transition challenge
transition challenge

Post-quantum security solutions are not simple drop-in replacements for existing protocols. Changes in protocols and a transition period with e.g. hybrid schemes (combining classical cryptography and PQC, as well as shipping products al-ready today with the possibility of in-field updates) are necessary for a smooth transition. This means that organizations will need to invest time and resources into updating their protocols and systems to support PQC, which can be a complex and time-consuming process.

Infineon¡¯s advancements help tackle transition challenge

We already provide a flexible hardware platform and software building blocks to enable hybrid schemes and in-field up-dates. Additionally, our team brings expertise and competence in implementing quantum cryptography, further enhan-cing our capabilities.

Your trusted advisor in the PQC landscape

Quantum-resilient longevity of products and data

With a series of breakthroughs in the field of PQC, Infineon enables customers to address today¡®s PQC challenges. Our PQC-ready platforms provide a clear migration path toward a quantum-resilient future. As the first company to receive a Common Criteria EAL6 for the implementation of PQC on a security controller and the first to offer a PQC solution with a TPM as well as hardware products with specific support for PQC, we are well positioned to support you in future-proofing your assets.

Fast G2M with a smooth certification process? ? ? ? ?

To accelerate your time-to-market, we offer software that is already PQC-certified. This allows our customers to offer PQC-compliant and secured products and applications while continuing to focus on their core business. In addition, our hardware offering with the latest technologies such as our unique Integrity Guard 32 hardware security architecture enables a smooth hardware certification process with a short evaluation time.? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ?