Provides PQC protection firmware update mechanism
Activate the quantum-resistant firmware upgrade path

Infineon presents future security solutions to address integrity issues in encrypted data and digital signatures.

Infineon Technologies AG announced today the launch of its new OPTIGA™ Trusted Platform Module (TPM) SLB 9672, which takes security to the next level.

The SLB 9672 provides a future-proof security solution with a post-quantum cryptography (PQC) protected firmware update mechanism using XMSS signatures.

This mechanism counters the threat of firmware corruption from attackers using quantum computers and enables a quantum-resistant firmware upgrade path, increasing the long-term usability of the device.

TPM provides a solid foundation for securely establishing the identity and software state of PCs, servers, and connected devices, and protecting the integrity and confidentiality of data stored or in transit.

The SLB 9672, a new addition to the Infineon OPTIGA TPM family, is the industry’s first TPM to offer additional PQC-based checking and a firmware update mechanism with 256-bit key length.

OPTIGA TPM uses a robust and reliable update mechanism to ensure that it is always up to date even when the standard algorithms are no longer reliable. The SLB 9672 can be updated and achieves improved computing performance with fail-safe functionality that blocks the impact of firmware corruption.

For example, the built-in fail-safe feature enables TPM firmware recovery according to the NIST SP 800-193 Platform Firmware Recovery Guidelines.

This TPM provides expanded non-volatile memory to store new capabilities such as additional certificates and encryption keys.

Security assessments and certifications are performed by external organizations according to Common Criteria and FIPS standards.

It also meets the TCG (Trusted Computing Group) standard (TPM 2.0 standard version 1.59) and is certified according to the latest TPM 2.0 standard.

TPM can be easily integrated into host software, providing a standardized trust base and various tools (software/demo boards) to assist design work.

It also supports the latest versions of Windows and Linux, and the chip operates over an extended temperature range of -40°C to 105°C.