Bringing hardware quantum resistance to embedded controllers

27-05-2025 | Microchip Technology | Semiconductors

Driven by advancements in cryptographic research and the necessity for stronger security measures, the NSA introduced the Commercial National Security Algorithm Suite 2.0 (CNSA 2.0) to establish a set of quantum-resistant cryptographic standards. The NSA is now urging data centre and computing markets to become post-quantum ready within the next two years. To help system architects fulfil evolving security demands, Microchip Technology has developed its MEC175xB embedded controllers with embedded immutable post-quantum cryptography support.

As a standalone controller, the device family employs a modular approach for developers to efficiently adopt post-quantum cryptography, helping provide long-term data protection without compromising existing functionality. These low-power controllers are developed with National Institute of Standards and Technology (NIST) approved post-quantum cryptographic algorithms, configurable secure boot solutions and an advanced eSPI.

“As the significance of potential, future attacks on cryptography using quantum computing is understood more widely, the cybersecurity landscape is already undergoing substantial transformations,” said Nuri Dagdeviren, corporate vice president of Microchip’s security products business unit. “Our MEC175xB controllers, featuring quantum-resistant cryptography implemented in immutable hardware with efficient power management, are designed to equip our customers with the tools they need to navigate increasingly complex digital security requirements.”

MEC175xB controllers include CNSA 2.0-compliant Module-Lattice-Based Digital Signature Algorithms (ML-DSA), Merkle stateful hash-based Leighton-Micali Signature (LMS) verification and Module-Lattice-Based Key-Encapsulation Mechanism (ML-KEM) standardized by NIST. These new algorithms with quantum attack resistance are implemented in immutable hardware to block possible attack paths in software implementations.

The controllers feature secure boot and secure firmware update schemes configurable to use either CNSA 1.0 or 2.0 or hybrid-based signature verification. Attestation capabilities use ML-DSA for signing and key generation to enhance system integrity and authenticity. At the core is an Arm Cortex-M4F processor with an MPU running at 96MHz to deliver high performance for complex computations and real-time applications. The controllers include 480KB of SRAM, I3C host and client interfaces and an optional USB 2.0 Full-Speed interface for versatile connectivity.


sebastian_springall.jpg

By Seb Springall

Seb Springall is a seasoned editor at Electropages, specialising in the product news sections. With a keen eye for the latest advancements in the tech industry, Seb curates and oversees content that highlights cutting-edge technologies and market trends.