Keep Up to Date with Our Progress

An FPGA-based QSPU can support changes to its cryptographic processing through a new hardware configuration, provided the updated design fits the device’s resources and interfaces.

A QSPU, or Quantum Security Processing Unit, moves selected cryptographic operations from a server’s general-purpose CPU into dedicated hardware.

Malware may be able to use a non-exportable encryption key without extracting it if it compromises an application or account authorized to request cryptographic operations.

An attacker can read encrypted data without extracting its key if they compromise an application, account, or operating system that already has permission to decrypt it. The system performs the decryption, and the attacker receives the readable result.

Encryption at rest protects data stored on a disk, volume, database file, backup medium, or other persistent storage. It prevents a person who obtains the powered-off storage device from reading its contents without the correct key.

ML-KEM-768 is a post-quantum key-establishment algorithm standardized by the U.S. National Institute of Standards and Technology in FIPS 203. Its purpose is to allow two systems to establish the same secret key over a public network

A sufficiently powerful quantum computer could break several public-key cryptographic systems that are widely used to establish encryption keys and authenticate digital communications.

Cryptographic keys exist in different locations during their lifecycle. A key may be created in software, stored in a configuration file, loaded into process memory, protected by a platform module, retained in a hardware security module.

Cryptographic keys should be kept in a security boundary appropriate to their purpose, value, and workload. A device identity key, a certificate-authority key, a disk-encryption key, and a high-volume TLS traffic key do not have identical requirements.

TLS 1.3 protects data in transit, but active session secrets must exist somewhere while a connection runs. Learn what can be exposed when a server is compromised—and how hardware key custody changes the model.