Integrated Post-Quantum Cryptography for Efficient RISC-V-Based Hardware Processors and Their Lifecycle
The main objective of CIPHER is the creation of an advanced Quantum-Resistant Security development platform, integrable with the RISC-V architecture. CIPHER will enable operational security management throughout the entire end-device lifecycle, from customization, provisioning, booting, communications, reconfiguration, updates, and end-of-life management. The platform will be developed as a coprocessor integrable with the RISC-V ecosystem, capable of efficiently performing multiple PQC security processes. This ambitious goal is supported by the following objectives:
v O1. CIPHER will enable security throughout the entire lifecycle of the end product into which it is integrated. To achieve this, it must enable the acceleration of resilient algorithms (PQC), securely providing capabilities to the main processor through standard mechanisms. CIPHER will explore integration with RISC-V TEEs, building on open hardware initiatives. Selected algorithms from the NIST candidates for integration with CIPHER must be tailored to use cases identified in the target markets, such as Kyber 1024 or Dilithium 2, as well as classical algorithms extended to provide quantum resistance. The CIPHER platform must allow for the inclusion of additional extensions as needed to adapt to evolving environments.
v O2. Support for trust and device lifecycle management, enabling secure management of cryptographic hardware. From initial customization to establishing the root of trust, provisioning, and secret key generation, CIPHER also supports key updating and revocation to enable upgrades and end-of-life. To this end, CIPHER will integrate with storage systems.
secure and unique writing.
v O3. CIPHER will provide quantum computing resistance to the hardware security primitives that ensure device boot and data management that support integrity and confidentiality. CIPHER can integrate with these functions to ensure encrypted or signed boot, or to certify integrity during operation, using any of the cryptographic algorithms it implements. ICV/ME 3 grants awarded
v O4. Enable secure communication in IoT devices. CIPHER will provide authentication and authorization mechanisms that can be integrated into existing environments (e.g., low-range personal area networks). These mechanisms will leverage the Extensible Authentication Protocol (EAP) or other lightweight portable IoT-related protocols. Applying least privilege and zero-trust principles, an access architecture for CIPHER capabilities appropriate for target markets will be explored, adapting to the different RISC-V execution levels.
v O5. Solution validation in pre-commercial scenarios. The goal is to ensure that the integrated solution works seamlessly in complex, real-world operational environments. This will enable the diverse range of IoT solutions to be reliably integrated into an interoperable IoT ecosystem. Ultimately, the goal is to support solutions for the leading semiconductor industry in sectors of national impact such as energy, agriculture, and industry, introducing the incorporation of post-quantum technology into the development of secure systems.
v O6. Marketing refinement (business adjustment). Based on the momentum from the previous objectives, a market implementation strategy will be designed for CIPHER. Product positioning and differentiation are integral parts of CIPHER’s marketing strategy and will be continually updated to keep our product ahead of the competition.
The SHIELD-IoT subproject is funded by the open call of the European project CYSSDE (Cybersecurity Deployment Preparedness Support, Capacity & Capabilities), promoted by LSEC and the European Union’s Digital Europe Programme, under grant agreement No. 101158471.
