Post-Quantum Crypto IP

The migration to post-quantum cryptography is underway, and hardware acceleration is where the latency and energy budget is won. Our PQC line implements the two NIST standards — ML-KEM (FIPS 203, key encapsulation) and ML-DSA (FIPS 204, digital signatures) — as synthesizable soft-IP, each primitive checked bit-exact against the reference implementation.

ML-KEM (FIPS 203) — key encapsulation

A complete, parameterized ML-KEM engine across all three NIST security levels:

Built from verified primitives — NTT, CBD noise sampler, rejection sampler, SHAKE/Keccak XOF, and byte (de)serialization — orchestrated through KeyGen / Encaps / Decaps. Bit-exact vs the pq-crystals reference.

ML-DSA (FIPS 204) — digital signatures

The Dilithium signature primitives, each golden-checked and safety-wrapped:

• NTT over the ML-DSA ring (q = 8380417, 32-bit) — its own transform, distinct from Kyber’s
• Rounding & hints (Power2Round, Decompose, MakeHint/UseHint)
• Samplers (ExpandA / ExpandS / ExpandMask / SampleInBall)
• (De)serialization for every key/signature format
• Infinity-norm rejection check — the constant-time signing gate

The method

• Golden-first, bit-exact. Every primitive is validated against the pq-crystals reference vectors — no “should match,” it does match, byte for byte.
• Safety-wrapped. Each accelerator carries the house ISO 26262 overlay (control-FSM duplicate-DMR + op/coefficient parity into a safety monitor), engineered as ASIL-B SEooC.
• Portable RTL. Vendor-neutral SystemVerilog that drops into your secure enclave or root-of-trust.

Architecture details, throughput, and the RTL data room under mutual NDA.Talk to us →

circuit-design.space · +1-971-357-1400 · sales@circuit-design.space