Generic security digital render - SDx crop
– Getty Images

The Trusted Computing Group (TCG) released its Trusted Platform Module 2.0 v185 specification, which integrates post-quantum cryptography (PQC) algorithms to help device owners protect sensitive data from quantum attacks.

The specification includes support for cryptographic algorithms, including module lattice-based digital signature (ML-DSA), which is designed to replace traditional digest-based signing workflows. That standard, which is part of the National Institute for Standards and Technology (NIST) FIPS 204, verifies digital signatures and is secure enough to provide protection from both quantum and classical attacks.

TCG’s new spec also extends support for the module lattice-based key-encapsulation mechanism (ML-KEM) standard, which is another NIST-standardized (FIPS 203) PQC algorithm that allows for information to be shared without potential compromise.

The process involves parties exchanging information via a KEM to securely share a secret key over a public channel. Asender uses a public key to encapsulate a shared secret and a ciphertext, with the receiver using their private key to recover the shared secret from the ciphertext.

Where traditional public-key encryption methods, like RSA, require a sender to choose a specific message to encrypt, ML-KEM generates it at random to boost security against even quantum systems.

TCG said the inclusion of ML-KEM and ML-DSA in its new TPM spec will “deliver enhanced security and integrity to computing systems.”

“Releasing our first TPM specification with PQC capabilities is not only a critical milestone for TCG, but for every vendor out there who uses our standards and wants to ensure their customers’ data remains secure,” Chris Fenner, co-chair of TCG’s TPM work group, explained.

The move was amply timed after Google set 2029 as the deadline for PQC migration, predicting that quantum computers will pose a significant threat to current cryptographic encryption by the end of this decade.

“While full industry migration to post-quantum will take some time, it’s fantastic to see TCG hardware standards lead the way in ensuring underlying infrastructure is capable of using quantum-resistant algorithms,” TCG President Joe Pennisi added.