IoT device security platform for post-quantum cryptography

Crypto Quantique, a provider of quantum-driven security for the IoT, has upgraded its QuarkLink IoT device security platform with a hybrid post-quantum cryptographic algorithm.

QuarkLink is an integrated, scalable, cloud-based software platform that decreases the time and expense of implementing all necessary security functions in embedded devices (IoT) and industrial PCs by up to 10X. It integrates client libraries for popular MCU families, supports Linux distributions in industrial PCs, and manages device identities. It also manages security keys, digital certificates, and Public Key Infrastructure (PKI) and supports secure boot and FOTA updates.

The hybrid key encapsulation mechanism adopted by QuarkLink is X25519Kyber768Draft00. This combines the classical elliptic curve Diffie-Hellman key exchange X25519 with the post-quantum secure algorithm Kyber (ML-KEM). This hybrid approach delivers immediate security against classical attacks and future protection against quantum computer-based threats. It also ensures protection against 'store-now/decrypt-later' attacks in which cybercriminals collect and store encrypted data to decrypt it in the future when more advanced capabilities become available.

QuarkLink hybrid-PQC is now available for MPUs running Embedded Linux, and support for MCUs will become available in Q1 2025.

Shahram Mossayebi, Crypto Quantique's CEO, commented: "This development is a further demonstration of Crypto Quantique's technology leadership in IoT device security. Companies adopting the QuarkLink platform today are not only able to save substantial time and cost in their embedded development work but can achieve quantum-resilient security against current and future attacks."