Category: Product

Enova Technology Launches Quantum Resistant Single Chip Solution

Hsin-Chu Science Park, Taiwan, December 13, 2024 – Building on its heritage of 20+ years expertise in real-time cryptographic chip design and solutions, Enova Technology announced today the availability of the Quantum Resistant (QR) Digital Signature Algorithm (DSA) solution based on the FIPS 140-2 Level 3 validated single chip crypto module – X-Wall MX+ xF/QR that supports stateful hash-based eXtended Merkle Signature Scheme (XMSS) and multi-tree XMSS (XMSS^MT) DSA. The X-Wall MX+ xF/QR solution can address identification and authentication of user and device through the XMSS and XMSS^MT DSA while protecting CUI (Controlled Unclassified Information) confidentiality and privacy through the built-in hardware AES 256-bit accelerator. 

“The solution marks the vanguard of our PQC chip roadmap,” said Robert Wann, founder and CEO of Enova Technology. “Leveraging years of accumulated experience in system architecture and system security engineering, this real-time cryptographic chip and solution helps the US federal government, defense, aerospace, law enforcement, healthcare, and industrial customers secure their sensitive data, like CUI. The solution is immediately available for qualified companies and organizations evaluation.”

Immediate Transition to Quantum Resistant Encouraged
NSA (National Security Agency) encourages vendors to begin adopting NIST SP 800-208 DSA immediately through the issuance of CNSA Suite 2.0 (Commercial National Security Algorithm) advisory. For deployed software and firmware, NSA recommends that the timing for transitioning to CNSA 2.0 should begin immediately with new software and firmware signing being CNSA 2.0 compliance by 2025. Continued progress in quantum research suggests that Cryptographically Relevant Quantum Computers (CRQC) will ultimately be realized. Therefore, NSA suggests that now is the time to plan, prepare, and budget for an effective transition to quantum-resistant (QR) algorithms, to ensure continued protection of National Security Systems (NSS) and related assets.

In addition, National Security Memorandum 10 (NSM-10) establishes the year 2035 as the primary target for completing the migration to PQC across Federal systems: “Any digital system that uses existing public standards for public‑key cryptography, or that is planning to transition to such cryptography, could be vulnerable to an attack by a relevant quantum computer.”

Armed with the FIPS validated security strength, the stateful hash-based XMSS/XMSS^MT of the X-Wall MX+ xF/QR can successfully address the software and firmware code signing with minimum impact to performance and adoption, and can effectively mitigate roll-back and side-channel attacks, among other threats. Pursuant to NIST Internal Report IR 8547 “Transition to Post-Quantum Cryptography Standards”, quantum vulnerable Public Key Cryptography (PKC) based digital signature algorithms such as ECDSA, EdDSA, and RSA with 112-bit security strength will be deprecated after 2030 and disallowed after 2035.

Other Use Cases
User Authentication and Constrained Devices – User and device authentication can be cryptographically verified through the stateful hash-based XMSS/XMSS^MT of the X-Wall MX+ xF/QR. Armed with the hardware-protected entropy source, bit strength, and state management capabilities, the solution well serves those constrained devices and equipment with long service lifetimes.
Long-term Confidentiality & Privacy – the stateful hash-based XMSS/XMSS^MT of the X-Wall MX+ xF/QR when collaborating with the built-in hardware AES 256-bit engine can provide quantum resistant protection to all long-term sensitive data.

Key Features

• FIPS 140-2 Level 3 validated single chip with low power consumption.
• 64-pin QFN small form factor with proven reliability through field deployment.
• Level 3 physical security, secure boot and secure firmware update.

About Enova Technology
Enova Technology is a global leader in chip-based cryptographic design & solutions that address the increasing requirement for privacy and confidentiality, satisfying the growing demand for data security. Enova’s advanced real-time cryptographic solutions are designed to meet the performance and standards of the most demanding government and enterprise customers. For more information, visit the Enova at www.enovatech.com.

Contact
Ms. Zoe Chen zoe.chen@enovatech.com
Enova Technology Corp. www.enovatech.com | info@enovatech.net
P: +886 3577 2767 | F: +886 35772770

伊諾瓦科技發表最新抗量子X-Wall MX+ xF/QR 單晶片解決方案

新竹科學園區，台灣，2024年12月11日 — 憑藉著20餘年即時加密晶片 (Real-time Encryption Chip) 設計及解決方案的專業知識，伊諾瓦科技 (Enova Technology) 今天宣佈推出基於 FIPS 140-2 Level 3 認證的X-Wall MX+ xF/QR 單晶片抗量子(Quantum Resistant, QR) 數位簽章 (Digital Signature Algorithm, DSA) 解決方案並可支援後續抗量子電子簽章法。該方案實施NIST SP800-208標準的XMSS (eXtended Merkle Signature Scheme) 和XMSS^MT (Multi-tree XMSS) 數位簽章，可實現使用者 (User)、代表使用者的程序 (Process on behalf of a user) 及裝置 (Device) 的身份識別與認證，同時透過內建的AES 256位元硬體加速器保護傳輸和儲存資料的機密性和隱私。

「該晶片解決方案代表著我們PQC藍圖的首要里程碑，」伊諾瓦科技創辦人兼執行長萬述寧說。「它利用累積多年的系統架構和系統安全工程 (System Security Engineering) 實踐經驗用以設計即時加密晶片和解決方案，幫助我們的國防、聯邦政府、航空航太、執法、醫療單位和工業客戶保護他們的敏感數據。我們即日起可為合格廠商及單位提供晶片解決方案。」

迎接量子時代的挑戰 – 從現在開始！
【已部署的軟體及韌體簽章，應立即開始轉換至 CNSA 2.0；新版軟體及韌體則應在2025年符合 CNSA 2.0 標準。X-Wall MX+ xF/QR 單晶片的XMSS/ XMSS^MT 解決方案可以成功解決軟體和韌體源碼簽章問題。】

美國國家安全局 (National Security Agency, NSA) 近期發佈 “Commercial National Security Algorithm” CNSA 2.0資安建議，指出現在是時候為轉換至抗量子演算法計劃、準備並規畫預算，以確保美國國家安全系統 (National Security Systems, NSS) 及相關資產的持續保護。此公告通知NSS的利害關係人抗量子演算法需求，並鼓勵供應商立即採用符合NIST SP 800-208標準的數位簽章如XMSS。具體而言，NSA敦促：

• 已部署的軟體及韌體簽章應立即開始轉換至CNSA 2.0；
• 新版軟體及韌體應在2025年符合CNSA 2.0標準。

美國《國家安全備忘錄10》(NSM-10)將2035年訂為聯邦系統完成後量子密碼 (Post Quantum Cryptography, PQC) 轉換的目標期限，以盡可能減少量子電腦帶來的威脅。企業必須立即採取行動，以避免敏感數據遭遇「先竊取，後解密」等長期安全風險。

【受影響裝置及設備：需要軟體和韌體更新的設備。例如：儲存設備、IoT/AIoT、檔案及應用伺服器、軟體應用程式、邊緣運算、網通和所有其他傳統設備。】

憑藉其 FIPS 安全認證強度，X-Wall MX+ xF/QR 單晶片的XMSS/ XMSS^MT 可以成功解決軟體和韌體源碼簽章問題，同時對性能和採用的影響最小，並有效地處理回滾 (Roll-back) 和旁道 (Side-channel) 攻擊等威脅。根據NIST IR8547 ”Transition to Post-Quantum Cryptography Standards” (轉換到後量子密碼學標準)，現有具 112 位安全強度的公鑰加密  (Public Key Cryptography) 數位簽章演算法（如 ECDSA、EdDSA 和 RSA）易受量子攻擊，將在 2030 年後棄用，並在 2035 年後被禁止使用。

晶片主要特色
• FIPS 140-2 Level 3驗證的低功耗 (< 0.65W @600MHz operation) 單晶片加密模組。
• 64-pin QFN封裝，通過多年現場部署提供經過淬鍊的可靠度。
• 具FIPS Level 3 物理安全、安全啟動和安全韌體更新。

關於伊諾瓦科技
伊諾瓦科技為全球領先的基於晶片的加密解決方案製造商，致力於應對日益增長的隱私和機密性需求，滿足全球對數據安全的日益關注。伊諾瓦的先進即時加密解決方案旨在滿足最嚴謹的政府和企業客戶對性能和加密標準的要求。欲了解更多資訊，請造訪伊諾瓦科技官網 https://www.enovatech.com 。

聯絡窗口
Ms. Zoe Chen zoe.chen@enovatech.com
Enova Technology Corp. www.enovatech.com | info@enovatech.net
P: +886 35772767 | F: +886 35772770

Enova Technology Launches Enigma 3.1 CloudKey – USB 3.0 Hardware Crypto Module Protecting Data Privacy & Confidentiality

SAN JOSE, Calif., Jan. 29, 2024 – Building on its heritage of expertise in hardware real-time encryption solutions, Enova Technology today announced the launch of the Enigma 3.1 CloudKey, a USB3.0 based hardware crypto module (HCM) with NIST/CSE FIPS 140-2 Level 2 and/or Level 3 validated single chip crypto module that includes a powerful hardware real-time AES 256-bit engine, which is used to protect data privacy and confidentiality via encrypting data in place of any host detectable storage drives including local, external, networked and cloud like Dropbox, One Drive and Google Drive.

Unlike software encryption that relies on CPU and other system resource which may expose weakness in terms of security operations, the Enigma 3.1 CloudKey itself performs role- or identity-based authentication and cryptographic operations that completely eliminates security weakness found on all software encryption products. Data corruption as usually associated with using software encryption can never occur when Enigma 3.1 CloudKey is in use for it operates on the protected command protocol layer that is shielded from errors caused by command abort or incomplete due to event such as power interruption during operations.

Usage Profile

• Selectively encrypt sensitive data on the local or portable drives for secure backup;
• May encrypt entire backup at the ESP (External Service Provider) or CSP (Cloud Service Provider);
• May send encrypted data to share with other party via public network. Only the right recipient who has possessed the right CloudKey and secrets can successfully decrypt;
• May securely transport sensitive data to an environment that has unknow security domain;

Key Features

• FIPS 140-2 Level 2 and/or Level 3 validated single chip.
• Supports MFA (multi-factor authentication): Enigma 3.1 CloudKey is something you have and your Unlock password is something you know.
• Easy to Use: Simple to use GUI of Windows; requires no software and/or driver download and installation.
• High performance hardware AES 256-bit crypto engine protects your data privacy and confidentiality.

About Enova Technology
Enova Technology is a global leader in hardware-based cryptographic solutions that address the increasing requirement for privacy and confidentiality, satisfying the growing demand for data security across the globe. Enova’s advanced real-time cryptographic solutions are designed to meet the performance and encryption standards of the most demanding government and enterprise customers. For more information, visit the Enova Technology website: https://www.enovatech.com or send inquiry to info@enovatech.net.