THE CRYPTRIG APPROACH
NIST-finalized post-quantum cryptography, executing in FPGA fabric
CRYSTALS-Kyber-1024 and CRYSTALS-Dilithium-3 are the only lattice-based KEM and signature algorithms finalized by NIST in August 2024. CQ1 executes both inside a hardware boundary — without software emulation, without CPU load, without a side-channel attack surface.
TECHNICAL FOUNDATION
Four layers that make PQC production-viable
Algorithm Selection
Kyber and Dilithium are the only fully-finalized NIST PQC standards. Cryptrig does not implement experimental or draft algorithms — only production-stable standards with published test vectors and multi-team review.
Lattice mathematicsHardware Execution
PQC operations run in dedicated FPGA fabric, not CPU. FPGA execution eliminates shared-memory side channels, provides deterministic timing, and sustains >18K ops/sec without software overhead.
CQ1 module specsPhysical Security
The boundary around the FPGA meets FIPS 140-3 Level 3 physical requirements. Tamper-detection mesh triggers zeroization within 100ms. Key material never leaves the boundary in plaintext form.
Security boundaryHybrid Migration Mode
Before full PQC deployment is complete, CQ1 supports X25519+Kyber-1024 hybrid key agreement. Classical security is maintained during the transition window. Upgrade is policy-controlled — no hardware replacement.
Migration pathSOFTWARE VS HARDWARE PQC
Why hardware matters for post-quantum
| Dimension | Software PQC | CQ1 Hardware PQC |
|---|---|---|
| Key encapsulation throughput | ~1,200 ops/sec (OpenSSL, 4-core) | >18,000 ops/sec |
| Latency at production load | 5–15ms P99 | <0.8ms P99 |
| Side-channel attack surface | Shared CPU memory, timing variance | Dedicated FPGA, no shared memory |
| Physical key protection | Process memory (OS-accessible) | FIPS 140-3 Level 3 tamper boundary |
| FIPS 140-3 certification path | FIPS 140-3 Level 1 (software) | FIPS 140-3 Level 3 (hardware) |
| Compliance for regulated use cases | Limited — PCI HSM requires hardware | Designed for PCI HSM and payment rails |