Together with the German Federal Office for Information Security (BSI), Infineon Technologies has reached a significant milestone in the transition to a quantum-resilient world.
For implementing a post-quantum cryptography algorithm in a security controller, Infineon is the only company to ever receive the Common Criteria EAL6, an industry-leading certification level.
This type of encryption strengthens security against threats from extremely powerful quantum computers for eSIM, 5G SIM, and smart card applications, such as credit cards, eHealth cards, and personal IDs. A significant step toward a future where our everyday lives are quantum-safe is the world’s first certification.
Quantum computers are predicted to develop to the point that they may crack existing encryption methods in the next ten to twenty years, jeopardizing the security of our digital lives. Documents such as eIDs that are now in use and have a long validity period must be able to withstand future quantum computer attacks.
The same is true for emails and encrypted messages sent today, as they can be later attacked by quantum computers once they are stored. The security of our digital infrastructure is strengthened by post-quantum cryptography methods like Module-Lattice-Based Key Encapsulation Mechanisms (ML-KEM), which are built to withstand these attacks. To overcome traditional security threats, these algorithms must be implemented securely.
Internationally acknowledged, the Common Criteria standard establishes standards and requirements for the security of IT systems and products.
The BSI emphasizes the value of defense against both traditional assaults, such as fault attacks, and quantum computer attacks by certifying Infineon’s secured implementation of a PQC algorithm with Common Criteria EAL 6.
A TEGRION security controller, Infineon’s newest line of 28 nm security controllers built on the company’s ground-breaking Integrity Guard 32 security architecture, was used to implement the ML-KEM algorithm.
Nations from all across the world accept the Common Criteria EAL6 framework, which was created in cooperation with other nations. The actual certification process is conducted by a number of national organizations.
Infineon’s TEGRION security controller has been evaluated and certified by the German BSI under the German Certification scheme.
EAL6 is a very high level of assurance, meaning that the system or product has been thoroughly and rigorously tested to validate its security claims. The certified security controller offers a strong basis for post-quantum cryptography by fusing cutting-edge cryptographic capabilities with high-performance computation.
By obtaining this certification, Infineon is establishing a new benchmark for the sector, opening the door for post-quantum cryptography to be widely used and for a safer digital future. Additionally, Infineon will keep developing more sophisticated quantum-resistant solutions as the PQC era draws near.
Key Comments
Infineon’s latest achievement demonstrates the company’s commitment to providing future-proof security solutions. “With our innovations in post-quantum cryptography and active contribution to algorithm development, Infineon is an integral part in finding future-proof PQC solutions,” said Thomas Rosteck, Division President Connected Secure Systems at Infineon. “There is no question that quantum computers will be a reality; Therefore, we need to push forward with the migration to post-quantum cryptography decisively. Being the first company to receive the Common Criteria EAL 6 certification for post-quantum security is a testament to our dedication in protecting critical infrastructure and helping maintain the security of our customers’ data in a post-quantum world. This once again underpins Infineon’s leadership in the security industry.”
“The threats posed by quantum computers are becoming more and more real and are within reach,” said Claudia Plattner, President of the German Federal Office for Information Security (BSI). “The BSI consistently supports and demands the switch to post-quantum cryptography in order to make files and applications secure in the long term. The availability of quantum-safe IT products, which can also be found in numerous everyday applications, is therefore a real milestone!”