Infineon implements first post-quantum cryptography in security controller

Infineon Technologies AG in collaboration with the German Federal Office for Information Security (or BSI) is the first company ever to receive the Common Criteria EAL6 for the implementation of a post-quantum cryptography algorithm in a security controller.

The post-quantum cryptography algorithm enhances security for eSIM, 5G SIM and smart card applications, including personal IDs, payment cards and eHealth cards, against threats resulting from highly capable quantum computers.

In the next ten to twenty years, quantum computers are expected to become powerful enough to break current cryptographic algorithms. Post-quantum cryptography algorithms such as Module-Lattice-Based Key Encapsulation Mechanisms (ML-KEM) are designed to resist these attacks, protecting encrypted messages and documents like eIDs. Module-Lattice-Based Key Encapsulation Mechanism (ML-KEM) is a type of post-quantum key encapsulation mechanism that combines the hardness of lattice problems with the algebraic structure of modules to provide secure key establishment and encapsulation.

“With our innovations in post-quantum cryptography and active contribution to algorithm development, Infineon is an integral part in finding future-proof PQC solutions,” said Thomas Rosteck, Division President Connected Secure Systems at Infineon. “There is no question that quantum computers will be a reality; Therefore, we need to push forward with the migration to post-quantum cryptography decisively. Being the first company to receive the Common Criteria EAL 6 certification for post-quantum security is a testament to our dedication in protecting critical infrastructure and helping maintain the security of our customers’ data in a post-quantum world.”

“The threats posed by quantum computers are becoming more and more real and are within reach,” said Claudia Plattner, President of the German Federal Office for Information Security (BSI). “The BSI consistently supports and demands the switch to post-quantum cryptography in order to make files and applications secure in the long term. The availability of quantum-safe IT products, which can also be found in numerous everyday applications, is therefore a real milestone!” 

By certifying Infineon’s secured implementation of a PQC algorithm with Common Criteria EAL 6, the BSI underlines the importance of resistance against classic attacks, like fault attacks, as well as quantum computer attacks. The ML-KEM algorithm was implemented on a TEGRION™ security controller, form the latest line of 28 nm security controllers based on Infineon’s revolutionary security architecture Integrity Guard 32. The Common Criteria scheme was developed in collaboration among various governments and is recognized by governments around the globe. The certification itself takes place through various national institutions. The TEGRION security controller has been evaluated and certified by the German BSI under the German Certification scheme.

The certified security controller combines high-performance processing with advanced cryptographic capabilities, providing a robust foundation for post-quantum cryptography.