Skip to content

Latest commit

 

History

History
220 lines (153 loc) · 25.9 KB

_index.md

File metadata and controls

220 lines (153 loc) · 25.9 KB
Raw
date title heroTitle heroDescription tags
2023-03-21 07:00:00 UTC
PQC Capabilities Matrix (PQCCM)
PQC Capabilities Matrix (PQCCM)
A list of software applications, libraries and hardware that includes support for Post Quantum Cryptography
resource

The PKI Consortium is managing a PQC Capabilities Matrix (PQCCM) of software applications, libraries and hardware that includes support for Post Quantum Cryptography, without endorsing their implementation or quality.

The list includes a wide variety of software applications, libraries, and hardware from different vendors. The list should be considered a living document and a starting point. Considering the rapid change in the area such things can vary from day to day and complete freshness of information can only be gathered from vendors directly.

The PKI Consortium is actively working to promote the adoption of Post-Quantum Cryptography, and the capabilities matrix is a key part of that effort.

What the PQCCM does:

  • collects and aggregates information on PQC capabilities across the cybersecurity landspace (vendors, software, hardware, etc..)
  • lists products that provide PQC functionality to the end user, not merely for example PQC enabled TLS access to a non PQC enabled service

No other activities besides those listed above are under the purview of PKI Consortium (unless explicitly stated otherwise).

What the PQCCM doesn't do:

  • review, vet, verify or test implementations or interoperability
  • perform source code review, formal review of algorithms, etc.
  • provide information, documentation or any recommended usage of Post Quantum Cryptography

Contribute

This list is a collaborative effort. To contribute please raise an issue or a PR on the GitHub Repository.

Legend

Symbol Meaning Comment
❌ The feature is currently not available
✔️ The feature is available for usage/test now
🕐 The feature is planned on the product roadmap in the coming six months Roadmap items must not be added if they are not really scheduled to be implemented in the coming six month period. Roadmap items should be noted in the vendor section with a specific time, i.e. "Q2 2023" or similar.

Capabilities

The table lists information from vendors related to support for Post Quantum Cryptography.

The list is ordered alphabetically by vendor, there is no other meaning to the order. {.callout-info}

Vendor Product Category Last updated Composite certificates Hybrid certificates LMS XMSS Falcon Dilithium SPHINCS+ Kyber BIKE McEliece HQC
Ascertia ADSS Server PKI 2024-09-03 ❌ ❌ ❌ ❌ ❌ ✔️ ❌ ✔️ ❌ 🕐 ❌
Botan Botan Software library 2023-10-04 ❌ ❌ 🕐 ✔️ ❌ ✔️ ✔️ ✔️ ❌ 🕐 ❌
Bouncy Castle BC Software library 2022-11-22 ✔️ ✔️ ✔️ ✔️ ✔️ ✔️ ✔️ ✔️ ✔️ ✔️ ✔️
Crypto4A QxEDGE HSP 2022-12-04 🕐 ✔️ ✔️ ✔️ 🕐 ✔️ ✔️ ✔️ ❌ ✔️ ❌
Crypto4A QxHSM HSM 2022-12-04 🕐 ✔️ ✔️ ✔️ 🕐 ✔️ ✔️ ✔️ ❌ ✔️ ❌
CZERTAINLY CZERTAINLY Software 2023-02-19 ❌ ❌ ❌ ❌ ✔️ ✔️ ✔️ ❌ ❌ ❌ ❌
Entrust nShield HSM 2022-11-22 ❌ ❌ ❌ ❌ ✔️ ✔️ ✔️ ❌ ❌ ❌ ❌
Entrust PKIaaS PKI 2022-11-22 ✔️ ❌ ❌ ❌ ✔️ ✔️ ✔️ ❌ ❌ ❌ ❌
EVERTRUST STREAM/HORIZON PKI 2023-09-07 ❌ 🕐 ❌ ❌ 🕐 🕐 🕐 ❌ ❌ ❌ ❌
Fortanix FX2200 HSM 2024-06-21 ❌ ❌ ✔️ ❌ 🕐 🕐 🕐 ✔️ ❌ ❌ ❌
I4P Trident HSM 2022-12-01 ❌ ❌ ❌ 🕐 ❌ ❌ ✔️ ✔️ ❌ ❌ ❌
IBM 4769/CCA HSM 2023-01-11 ❌ ❌ ❌ ❌ ❌ ✔️ ❌ ❌ ❌ ❌ ❌
IBM Crypto Express 7S (CEX7S) / CCA/EP11 HSM 2023-01-22 ❌ ❌ ❌ ❌ ❌ ✔️ ❌ ❌ ❌ ❌ ❌
IBM Crypto Express 8S (CEX8S) / CCA/EP11 HSM 2023-01-22 ❌ ❌ ❌ ❌ ❌ ✔️ ❌ ✔️ ❌ ❌ ❌
InfoSec Global AgileSec Analytics Software 2024-04-24 ❌ ❌ ✔️ ✔️ 🕐 ✔️ ✔️ ✔️ 🕐 🕐 🕐
Infrasoft Pty Ltd uLinga Suite Software 2024-05-24 ❌ ❌ ❌ ❌ ❌ ❌ ❌ ✔️ ❌ ❌ ❌
ISC CDK Software library 2023-03-04 ❌ ❌ ✔️ ❌ ✔️ ✔️ ✔️ ✔️ ❌ ✔️ ❌
ISC CertAgent PKI 2023-03-04 ❌ ❌ 🕐 ❌ ✔️ ✔️ ✔️ ✔️ ❌ ✔️ ❌
Keyfactor SignServer Signing Software 2022-12-19 ❌ ❌ ✔️ ❌ ❌ ✔️ ✔️ ❌ ❌ ❌ ❌
Keyfactor EJBCA PKI 2024-07-22 ❌ ✔️ ❌ ❌ ✔️ ✔️ ❌ ❌ ❌ ❌ ❌
MTG AG Corporate PKI PKI 2023-09-25 ❌ ❌ ❌ ❌ ✔️ ✔️ ✔️ 🕐 ❌ ✔️ ❌
Nexus Group Certificate Manager PKI 2024-03-13 ❌ ❌ ❌ ❌ 🕐 🕐 🕐 ❌ ❌ ❌ ❌
Open Quantum Safe liboqs Software library 2022-11-30 ❌ ❌ ❌ ❌ ✔️ ✔️ ✔️ ✔️ ✔️ ✔️ ✔️
Securosys Primus HSM X/X2-Series, Primus HSM E/E2-Series, CloudHSM HSM 2024-10-24 🕐 🕐 ✔️ ✔️ ❌ ✔️ ✔️ ✔️ ❌ ❌ ❌
Thales Luna HSM 2022-11-22 ❌ ❌ ✔️ ✔️ ❌ ✔️ ❌ ✔️ ❌ ❌ ❌
Utimaco Q-Safe HSM 2022-11-28 ❌ ❌ ✔️ ✔️ ❌ ✔️ ❌ ✔️ ❌ ❌ ❌
Utimaco u.trust Identify PKI 2022-11-28 ✔️ ❌ ❌ ❌ ✔️ ✔️ ✔️ ❌ ❌ ❌ ❌

NOTE: HSS and XMSSMT are the multi tree variants of LMS and XMSS. {.callout-info}

NOTE: The table does not consider variants of algorithms, for example Dilithium has had many changes during the NIST rounds so a checkbox in the Dilithium column does not mean products are necessarily interoperable. Consult the vendor sections for details. {.callout-info}

Crypto4A

The QxEDGE is a Hybrid Security Platform (HSP) which combines the features of a Quantum-Ready HSM with Confidential Computing support. The QxHSM is a network attached HSM. Both products are built around the Crypto4A QASM FIPS 140, Level 3 validated module. All of the supported PQC algorithms are supported natively and available as part of the baseline product. The QASM also contains classic and PQC roots of trust that are used to validate firmware, code and configuration updates signed using dual signatures using HSS/LMS and ECDSA. The QASM also uses hybrid key management approach that combines Classic McEliece and ECDH for inter-HSM, C4A-to-HSM and long term external archiving security. An upcoming update (available as part of regular M&S) will also enable classic, PQC and Hybrid remote key attestation using already pre-loaded classic and PQC attestation keys.

Securosys

Primus HSM, Primus X Cyber Vault and HSM as-a-service supports all common cryptographic algorithms, blockchain procedures including the PQC algorithms selected by NIST. Devices are under certification for FIPS140-3 Level 3 and CC EN 419221-5 (eIDAS protection profile).

Utimaco

uTrust Identify and Q-Safe firmware extension. Software simulator available, Dilithium in process of updated to round 3 version.

[Q-safe]https://utimaco.com/products/categories/further-solutions/q-safe) u.trust Identify

Thales

Functional module for Luna. Need functional modules enabled.

Bouncy Castle

Java and C# APIs with all NIST candidate support, and some older ones. Available as open source software. All NIST candidates available in Java from version 1.72 and C# from version 2.0.0.

The Bouncy Castle for kotlin open source package provides a script/command line interface for generating certificate chains with different algorithms, including hybrid certificates using X.509 section 9.8 alternative signatures.

Nexus Group

PQC online test service available starting April 2024. Support for pure-PQC certificate with Dilithium, Falcon and Sphincs+ algorithms first. Later support for Hybrid and composite certificates will be added. General available version will be released depending on progress of standardization process.

Entrust

nShield

The Entrust nShield Post-Quantum SDK enables post-quantum cryptographic applications for nShield HSMs with the CodeSafe SDK.

PKIaaS

The Entrust ]PKI as a Service (PKIaaS)](https://www.entrust.com/digital-security/certificate-solutions/products/pki/managed-services/pki-as-a-service) for Post-Quantum Beta Program supports all three algorithms selected in round 3 of the NIST competition and can provide composite and pure quantum CA hierarchies.

EVERTRUST

EVERTRUST Stream is a PKI CA/VA/TSA and EVERTRUST Horizon is a PKI RA and CLM software. Both products are currently able to issue and manage pure-PQC and hybrid backard-compatible certificates based on Dilithium/Falcon/Sphincs+ algorithms. However the versions of the software that do so are yet unreleased. Release is planned upon completion of the standardization process.

Keyfactor

SignServer

SignServer performs server side signing and is capable of Post-Quantum signatures on CMS (RFC5662) messages as well as plain signatures. SPHINCS+ and Dilithium are supported from SignServer 6.0.

EJBCA

EJBCA PKI can create CAs and issue X.509 certificates signed using Post-Quantum algorithms. Available as open source software and containers with support for Dilithium and Falcon from EJBCA 8.0.

Fortanix

Fortanix DSM has LMS and ML-KEM support, and NIST selected signature algorithms on the roadmap for 2024. See Algorithm Support

Open Quantum Safe

OQS is an open source software library that implements PQC algorithms, as well as integrations such as into OpenSSL.

I4P

Trident HSM is a general purpose network HSM developed by I4P that received the Common Criteria (CC) EAL4+ (EN 419221-5 as well as EN 419241-2) certification.

Cryptographic applications are enabled to use Post-Quantum algorithms (SPHINCS+ and Kyber) even in the CC restricted mode that helps with using hybrid solutions and the transition to PQC.

CZERTAINLY

Open source CZERTAINLY platform implements experimental post-quantum cryptography algorithms support for certificate, cryptographic key, and digital signature lifecycle management and automation. The following PQC signature schemes are supported:

  • FALCON
  • CRYSTALS-Dilithium
  • SPHINCS+

IBM

The Crypto Express (CEX7S & CEX8S) cryptographic hardware security module products work with certain IBM Z® servers and the Integrated Cryptographic Service Facility (ICSF) to support post-quantum algorithms. Support is also available for Linux on Z and LinuxONE. The 4769 cryptographic hardware security module product supports post-quantum algorithms using the CCA APIs on x64 and IBM Power® servers.

MTG AG

MTG Corporate PKI consists of the two aligned product components MTG Certificate Authority (MTG CARA) and MTG Certificate Lifecycle Manager (CLM). MTG CARA as been extended by the PQC algorithms ML-DSA (Dilithium), SLH-DSA (SPHINCS⁺), and Falcon.

Furthermore, we provide an online demo of a PQC CARA version supporting the McEliece and SPHINCS⁺ post-quantum algorithms and a post quantum CA hierarchy that is available for private test at https://pqc-pki.mtg.de.

ISC

ISC produces PKI/PQC-enabled applications (https://infoseccorp.com/pki/): CertAgent, a certificate authority; CSPid, a virtual smartcard with central repository for certificates and private keys; DAS, a webapp providing brokered encryption and authentication; SecretAgent, an encryption and digital signature utility; and cryptographic libraries that offer post-quantum algorithms.

Botan

Botan is a C++ cryptography library released under the permissive Simplified BSD license. It offers the tools necessary to implement a range of systems, such as TLS protocol, X.509 certificates, AEAD ciphers, PKCS#11 and TPM hardware support, password hashing, and post quantum crypto schemes.

Ascertia

Ascertia PQC Matrix

ADSS Server

ADSS Server is a modular trust services platform that offers PKI and digital signature services. The following services are being updated to support Post-Quantum algorithms in the first half of 2024.

ADSS Signing Server

ADSS Signing Server performs server side signing and eSealing and will support CRYSTALS-Dilithium PKCS#1 and CMS signatures.

ADSS SAM Service

The ADSS SAM Server performs eIDAS compliant remote authorised server side signing and eSealing will support CRYSTALS-Dilithium PKCS#1 signatures.

ADSS PKI Server

ADSS PKI Server can create CAs and issue X.509 certificates signed using Post-Quantum algorithms. The following PQC schemes are on the roadmap for 1st half of 2024:

  • CRYSTALS-Dilithium
  • Classic McEliece
  • Kyber

Infrasoft

Infrasoft specialises in communication software with its uLinga product suite. The software supports Kyber-based hybrid key exchanges proposed for TLS 1.3 to secure sensitive data processed by the software.

References

The following table contains references to the PQC capabilities and algorithms.

Algorithm Reference
FIPS 203 (ML-KEM) https://csrc.nist.gov/pubs/fips/203/ipd
FIPS 204 (ML-DSA) https://csrc.nist.gov/pubs/fips/204/ipd
FIPS 205 (SLH-DSA) https://csrc.nist.gov/pubs/fips/205/ipd
Composite certificates https://datatracker.ietf.org/doc/draft-ounsworth-pq-composite-keys/
Hybrid certificates https://datatracker.ietf.org/doc/html/draft-truskovsky-lamps-pq-hybrid-x509-01
Chameleon certificates https://datatracker.ietf.org/doc/draft-bonnell-lamps-chameleon-certs/
X.509 Alternative Signatures (section 9.8) https://www.itu.int/rec/T-REC-X.509-201910-I
LMS https://www.rfc-editor.org/rfc/rfc8708.html
XMSS https://datatracker.ietf.org/doc/html/rfc8391
Falcon https://falcon-sign.info
Dilithium https://pq-crystals.org/dilithium/resources.shtml
SPHINCS+ https://sphincs.org
Kyber https://pq-crystals.org/kyber/index.shtml
BIKE https://bikesuite.org
McEliece https://classic.mceliece.org
HQC https://pqc-hqc.org
NIST Recommendation for Stateful Hash-Based Signature Schemes SP800-208