Two products, one architecture
The crypto engine. The root-of-trust. Same core.
Crypto EngineQCIM Crypto Engine
The all-in-one asymmetric cryptographic block. Built on Processing-in-Memory (PIM) architecture, QCIM Crypto Engine handles RSA, ECC, and post-quantum algorithms without dedicated accelerator blocks. A single unified engine that maximizes memory and compute efficiency.
- · PIM architecture for memory-efficient crypto operations
- · Integrated secure memory for keys and intermediate values
- · Firmware-updateable algorithms for crypto agility
- · Flexible algorithm kernel memory with configurable sizes
Figure 01 above — IP block diagram↑ Root of TrustQCIM Root-of-Trust
Complete Hardware Root-of-Trust integrating the QCIM Crypto Engine with comprehensive security mechanisms. Provides secure boot, attestation, key management, and hardened protection against physical and logical attacks.
- · Secure boot with chain-of-trust verification
- · Remote attestation and device identity services
- · OTP key storage and secure key derivation
- · Anti-tamper detection, response, and key zeroization
- · Zero-touch provisioning and binding support
Figure 02 above — secure-element SoC↑ Why crypto agility
Why crypto agility matters for hardware roots-of-trust.
The RoT challenge
Hardware Roots-of-Trust must handle diverse cryptographic requirements across their lifetime: different global standards (NIST, BSI, ETSI), evolving protocols (TLS, IPsec, V2X), PKI operations, attestation, and secure boot. Traditional fixed-function crypto blocks require costly silicon redesigns and re-certification when any standard evolves.
Worse, re-certification can take 12-18 months and cost millions — making algorithm updates practically impossible for deployed systems. Products with 10+ year lifecycles are locked into obsolete cryptography.
QCIM's solution
QCIM's firmware-updateable crypto agility means your silicon doesn't change when algorithms do. The crypto-agile architecture maintains certification across algorithm updates because the hardware security boundaries remain constant — only the firmware algorithms evolve.
This enables: zero-touch provisioning workflows that adapt to new protocols, binding mechanisms that support emerging standards, attestation with larger payloads for PQC, and long-lived secure enclaves that remain compliant for 15+ years without hardware respins.
Growing secure-enclave demands
Modern secure enclaves face unprecedented memory and compute pressure: larger attestation payloads (PQC signatures are 10× bigger), zero-touch provisioning from the secure enclave on boot, expanded SRAM and mailboxes for PQC key material, and simultaneous protocol support.
QCIM's PIM architecture maximizes available resources for these trends while maintaining comprehensive cryptographic capabilities. You get more memory and compute for your application while hardened crypto remains available.
Core capabilities
Capability matrix · NDA gates the full datasheet
Every feature, every configuration, every form factor.
Certification packages available upon request: Current certification status, roadmap timelines, evidence packages, compliance matrices, and guidance for customer-specific certification requirements. QCIM's crypto agility prevents re-certification when algorithm standards evolve.
| Feature | QCIM Core | QCIM Dataspeed | QCIM RoT | QCIM Safety RoT | Custom Implementation |
|---|
| FPGA | ASIC | FPGA | ASIC | FPGA | ASIC | FPGA | ASIC | FPGA | ASIC |
|---|
| Existing Asymmetric Cryptography Support | | | | | | | | | | |
|---|
| Symmetric Cryptography Support | | | | | | | | | | |
|---|
| Post-Quantum Cryptography Support | | | | | | | | | | |
|---|
| Legacy Secure Boot Support | | | | | | | | | | |
|---|
| PQC Secure Boot Support | | | | | | | | | | |
|---|
| Secure Key Management | | | | | | | | | | |
|---|
| Key Derivation | | | | | | | | | | |
|---|
| PUF Included | | | | | | | | | | |
|---|
| DPA Secure Algorithms | | | | | | | | | | |
|---|
| DPA Secure Hardware | | | | | | | | | | |
|---|
| Anti-Tamper Mechanisms | | | | | | | | | | |
|---|
| OTP Key Management | | | | | | | | | | |
|---|
| Memory ECC | | | | | | | | | | |
|---|
| Multiple RoT Support | | | | | | | | | | |
|---|
| Secure Debug | | | | | | | | | | |
|---|
| FIPS 140-3 | | | | | | | | | | |
|---|
| ISO 26262 | | | | | | | | | | |
|---|
| CC EAL 5+ | | | | | | | | | | |
|---|
| PSA Certified | | | | | | | | | | |
|---|
| SESIP | | | | | | | | | | |
|---|
| IEC 62443 | | | | | | | | | | |
|---|
· Capability marks pending datasheet finalization. Detailed support matrix available under NDA.
Performance
Algorithms, throughput, resources.
Algorithm support- RSA
- 2048-4096 bit
- ECC
- P-256, P-384, P-521
- PQC
- ML-DSA, ML-KEM
Throughput- RSA-2048
- 200+ ops/sec
- ECDSA P-256
- 500+ ops/sec
- AES-256
- 50+ MB/s
Resources- Area
- Configurable
- Power
- Low to high
- FPGA
- Xilinx · Intel
· Detailed specifications available upon request.
Integration
FPGA today. ASIC on the path.
FPGA flow
- 01Drop-in IP core with standard bus interfaces (AXI, APB)
- 02Pre-configured synthesis and timing constraints
- 03Comprehensive software drivers and API documentation
ASIC flow
- 01Synthesizable RTL with DFT and scan insertion support
- 02Technology-agnostic design portable across foundries
- 03Integration support and validation test suites