Cryptography Engineering

We’re dedicated to bringing robust, next-generation cryptography to even the most resource-constrained devices. One direction of ongoing work has focused heavily on implementing and optimizing the NIST-standardized post-quantum cryptographic algorithms, ML-KEM (formerly Kyber) and ML-DSA (formerly Dilithium), along with the SHA-3 hash function, specifically for the Internet of Things (IoT) ecosystem. All of our technical work and results are open source and available on our Github repository. Balancing Performance, Memory, and Security on IoT Developing cryptography for embedded devices in a high-level language like Rust presents unique challenges. IoT devices operate with drastically reduced memory, especially low-latency RAM, and load operations are particularly costly. Our goal isn’t necessarily to achieve the absolute fastest implementation, but to provide a formally verifiable solution that is easy to use and offers best in class performance. This requires tight control over memory and operations to ensure optimal pipelining effects and memory access patterns. ...

We extend the libcrux cryptographic library with support for resource constrained IoT devices. The libcrux-iot library contains high performance, high assurance implementations of post-quantum, as well as classical, cryptographic primitives. The project is supported by the German innovation programme for small and medium-sized enterprises (ZIM). The library will be launched with our partner Crypto Quantique. Crypto Quantique will use libcrux-iot in their IoT software platform, which enables device manufacturers and OEMs to connect and manage their devices to multiple cloud service providers with ease. ...