Hybrid KEM Engine.

Overview

The Hybrid KEM Engine combines the ML-KEM shared secret with a classical X25519 shared secret into a single session key that is secure if either component remains unbroken. The shared secret is computed as SHA3-256(ss_pqc || ss_ecc || ct_ecc || pk_ecc || label), binding the PQC secret to the classical secret and transcript. This X-Wing archetype design provides a straightforward path toward crypto-agile migration, ensuring that systems remain protected against both classical and quantum attackers throughout the transition period.

Key Features

• X-Wing archetype combiner
• SHA3-256-based binding
• ML-KEM secret from the ML-KEM core, X25519 values on ports (standard ECC drop-in)

Benefits

• Crypto-agile migration with no security regression
• Defends against both classical and quantum attackers during transition

Availability and Deliverables

Available Verified combiner. Soft IP delivered as foundry-portable RTL.

Standard Deliverables

• Synthesizable SystemVerilog RTL
• Self-checking testbench(es)
• Python golden reference model
• cocotb regression
• Synthesis scripts
• Integration/user guide

Firm/hard IP (hardened netlist for a target node) available on foundry enablement.

Related Products