London, UK, Nov. 2, 2022 — Riscure, a global security advisory
lab and market leader in Side Channel Analysis (SCA), has partnered with
PQShield, a cybersecurity company specializing
in post-quantum cryptography, to evaluate PQShield’s SCA testing and validation processes.
The
quantum threat is high on the global security agenda, with governments
and their partners planning their transition to quantum-resistance via
post-quantum
cryptography (PQC). In July, the US National Institute of Standards and Technology (NIST)
announced draft standards for post-quantum cryptography — an important
and long-awaited information security milestone.
Even
when PQC algorithms are mathematically secure, they can potentially be
broken by a class of exploits known as side channel attacks. These
attacks
exploit algorithm implementation in hardware or software rather than
the underlying mathematical problem, underlining how important it is
that any side-channel vulnerabilities are identified and addressed
before PQC solutions are widely rolled out.
PQShield
is a market leader in quantum-ready cryptographic solutions for
hardware, software and communications. The company is a major
contributor to
the NIST
post-quantum standardisation project, and the draft standards it announced
in July this year are all schemes
contributed to by PQShield’s researchers and advisory board.
Riscure
provides evaluation and validation services to reinforce the security
of products and components, including hardware cryptographic engines,
large SoCs, boot ROM, security-enhanced software applications and
trusted execution environments. Riscure also provides
Security Tools and
Training to help companies improve the security knowledge and expertise of their
development teams.
With
this project, the two companies will evaluate PQShield’s SCA testing
process. They will also share knowledge about post-quantum
cryptography and its impact on side channel attacks, advancing
companies’ and governments’ understanding of how new quantum-secure
algorithms can be secured through robust validation and countermeasures.
PQShield CEO & Founder, Ali El Kaafarani, said:
“Side
channel attacks are a serious concern for cryptographers working on
quantum-secure solutions. Not all devices running cryptographic
operations
provide the same level of assurance, so while many governments have
encouraged organizations to upgrade their secure digital infrastructure,
this must be tested and validated before it can stand up to the quantum
threat.
“Riscure
has a well-earned reputation when it comes to understanding and
tackling complex security challenges. We are delighted to
share our learnings in the face of the looming quantum threat to
information security.”
Marc Witteman CEO & Founder from Riscure added:
“We have seen a surge in interest from businesses and governments
recently looking to secure sensitive data with PQC. We are looking
forward to working alongside PQShield, experts in PQC software and
hardware co-design, by educating and sharing best practices
with industry. With this collaboration we also aim to provide the
industry with robust quantum-resistant Side Channel Analysis and lead to
integration of PQC into our leading tools — in turn helping all major
businesses and governments mitigate the quantum-threat.”
About PQShield
PQShield
is a cybersecurity company specialising in post-quantum cryptography,
protecting data from today’s attacks while readying organisations for
the threat landscape of tomorrow. It is the only cybersecurity company
that can demonstrate quantum-safe cryptography on chips, in
applications, and in the cloud. Headquartered in the UK, with additional
teams in the United States, France and the Netherlands,
its quantum-secure cryptographic solutions work with companies’ legacy
systems to protect devices and sensitive data now and for years to come.
PQShield is principally backed by Addition, Crane Venture Partners,
Oxford Science Enterprises (formerly OSI), Kindred
Capital, and InnovateUK.
www.pqshield.com |
LinkedIn |
Twitter
About Riscure
Riscure
is a leading vendor of security tools, services, and training for edge
devices. Our tooling helps global technology leaders to build robust
hardware
and software solutions. Riscure security analysts bring top-notch
security expertise to development teams and aim to run no-pain
certification projects. Built on a wealth of security research and
extensive practical experience, Riscure is well recognized
for its technical leadership. Riscure serves Semiconductor, Mobile
Security and Mobile Payment, Automotive and Premium Content industries
as well as the Government sector. Follow us on Twitter
@Riscure
and
LinkedIn.
