2025-12-03
CHANGING has partnered with leading chip design companies to integrate Post-Quantum Cryptography (PQC) at the chip R&D stage, helping the manufacturing sector establish quantum-safe protection ahead of time. With NIST announcing the first set of PQC standards, quantum security is no longer just a research topic—it has become a critical requirement for ensuring that supply chains can continue operating under next-generation attack methods. The IoT ecosystem includes chip designers, module manufacturers, equipment makers, and software service providers. If any link fails to adopt PQC, it may become the weak point in the entire architecture. CHANGING has taken the lead by embedding PQC at the earliest phase of the product lifecycle—during chip planning.
With CHANGING's PQC-ready CodeSign solution, customers can issue IDevID (Initial Device Identity) certificates compliant with the OCP Open Compute Project Caliptra standard and program them into SoC (System on a Chip) devices. The solution also applies PQC signature algorithms to ensure firmware integrity, enabling every chip to be equipped with the foundational security required to face future quantum threats upon leaving the factory. This meets the high-level expectations of international supply chains for hardware roots of trust.
CHANGING adopts a three-step approach—risk assessment, standards compliance, and technology integration—to implement PQC. First, it identifies an enterprise's key data assets and digital signature mechanisms and provides a risk assessment report. Next, it establishes encryption infrastructure that complies with future international regulations (such as U.S. CNSA 2.0 and EU CRA) and supply-chain PQC requirements. Finally, based on the assessment, PQC algorithms such as ML-KEM, HSS/LMS, and ML-DSA are integrated into product firmware and relevant applications, enabling organizations to upgrade securely while balancing risks and costs, and reducing downtime or operational disruptions caused by large-scale one-time changes.

Image: CHANGING collaborates with a leading chip design company to integrate Post-Quantum Cryptography during chip manufacturing, helping the manufacturing sector deploy quantum-safe protection from chip production to maintenance operations.
After chips are deployed, PQC continues to extend into device operation and OTA maintenance. By combining ML-DSA signatures with certificate lifecycle management, devices can verify firmware authenticity and integrity at startup, confirm the origin and consistency of update packages during remote updates, and reserve room for future algorithm upgrades and parallel operation. This fulfills the requirements of crypto agility, ensuring that systems remain flexible as standards and threats evolve.
Looking ahead to the coming year, CHANGING has observed that IT decision-makers are increasingly prioritizing the adoption of PQC capabilities in new projects and procurement. Across industries such as IoT, finance, telecommunications, automotive, defense, and critical infrastructure, demand is rapidly rising for PQC implementations that balance performance and cost. Upstream and downstream supply-chain vendors increasingly regard “quantum security” as a common security baseline. It has become essential for chip designers, device manufacturers, and software providers to jointly plan security designs and verification mechanisms spanning the entire product lifecycle.
CHANGING notes that many countries view 2035 as a key milestone for completing the transition to quantum-safe protection across critical systems. The year 2035 is not far away. For manufacturers with long-lifecycle products, platforms being designed today may still be in service by the time quantum computers acquire practical attack capabilities. CHANGING will continue collaborating with more chip and device manufacturers to incorporate PQC into new product specifications and procurement requirements, enabling the manufacturing sector to implement comprehensive quantum-safe planning from chip production through operational maintenance.For more product information, please visit CHANGING's website:https://www.changingtec.com/EN/。
https://www.changingtec.com/EN/iot_security_pqc.html
https://www.changingtec.com/EN/ss.html
CHANGING – Marketing & PR Department
Tel: +886-3-563-0688
EMAIL:marcom@changingtec.com
CHANGING Information Technology Inc.
Committed to independent research and development, CHANGING strives to build a secure and convenient digital environment. Its core expertise lies in identity and authentication security for people, processes, and devices, including zero trust architecture, IoT security, FinTech cybersecurity, and digital transformation applications. With more than 25 years of professional experience, CHANGING's mission is to help various industries establish a trustworthy and secure zero trust network infrastructure. Through continuous innovation, it provides diverse products and services to meet the evolving needs of customers, working together to create a safer and more efficient digital ecosystem. In the digital age, CHANGING aims to be your most trusted partner.