Northberth Unveils New Visual Identity and Asserts Leadership in Cryptography Management

• This new brand identity, along with a completely redesigned website, marks a major strategic shift for Northberth.
• Building on its role as a pioneer and European leader in post-quantum cryptography (PQC), Northberth places crypto agility at the core of its mission: helping organizations manage cryptographic risk and ensure lasting compliance in the era of quantum cyber threats.

The First Truly Open Cryptographic Assets Discovery and Analysis Solution

• Cryptography Assets discovery is crucial to achieving full visibility into cryptographic assets and risk across an organization’s IT and OT systems as well as its applications.
• Cryptographic risk, long considered a major threat, is becoming with the advent of quantum computing. The discovery of cryptographic assets is the foundational step for any successful Post-Quantum Cryptography (PQC) migration plan.
• Northberth COMPASS Discovery provides a complete inventory of crypto assets, enabling continuous monitoring that is in alignment with enterprise remediation plans. It offers top management clear visibility into the organization’s actual cryptographic risk and serves as an essential crypto-governance tool for cybersecurity managers.

Northberth, the First Company in the EU to Receive NIST CAVP Certification for All Three Standardized Quantum-Safe Algorithms

• First in the EU: Northberth is the first company in the European Union to achieve NIST CAVP certification for all three standardized algorithms.
• Quantum-Safe Technology: This certification validates the implementations of post-quantum algorithms in Northberth’s Quantum-Safe Library.
• Path to FIPS 140 Certification: This is a crucial step towards obtaining the FIPS 140 certification, essential for ensuring the security of devices incorporating Northberth’s technology

ProvenRun and Northberth Announce Strategic Partnership for Quantum Safe Trusted Execution Environment (TEE) Solutions.

• Post-quantum crypto-agility capabilities integrated into the ProvenCore Operating System and TEE
• Targeting the embedded market, particularly in aerospace and defense, automotive and broader semiconductors/IoT
• Two experts joining forces in a long-term strategic alliance

Northberth’s technology used in post-quantum email system experiment by the Banque de France and the Monetary Authority of Singapore

• The two financial institutions conducted a joint experiment on quantum-resistant email communications.
• This experiment was made possible by using Northberth’s hybrid post-quantum plug-in for Outlook.

Paris, September 25, 2024. Northberth has been named IDC innovator as post-quantum cryptographic (PQC) vendor for 2024.

This distinction given by the analyst firm IDC highlights five up and coming companies that offer transformative, long-term solutions which help organizations protect legacy data and infrastructure with from the risk of a potential quantum cyberattack.

The “IDC Innovator 2024” award recognizes Northberth’s expertise and approach, positioning itself at the forefront of post-quantum cryptography since its creation in 2019. This recognition comes at a crucial time, as the first post-quantum cryptography standards were recently validated and published by the National Institute for Standards and Technology (NIST) in August 2024, along with a recommendation for organizations to begin transitioning to post-quantum as soon as possible.

Florent Grosmaitre, CEO of Northberth, states, “We are proud to be named an IDC Innovator. This award highlights our approach of offering state-of-the-art remediation solutions to enable organizations to protect themselves from the quantum threat while remaining crypto-agile.”

On August13, the National Institute of Standards and Technology (NIST) published the definitive post-quantum cryptography standards for the following algorithms:

For Key-Encapsulation Mechanism (KEM)

• FIPS203 – Module-Lattice-Based Key-Encapsulation Mechanism Standard: ML-KEM (formerly CRYSTALS-KYBER)

For Digital Signature

• FIPS204 – Module-Lattice-Based Digital Signature Standard: ML-DSA (formerly CRYSTALS-DILITHIUM)
• FIPS205 – Stateless Hash-Based Digital Signature Standard: SLH-DSA (formerly SPHINCS+)
• These two complete the previously-approved signature algorithms that safeguard from the Stateful Hash-Based Signature Schemes (LMS, HSS, XMSS, XMSS^MT).

These new norms provide a solid foundation to help organizations transition to quantum-proof cryptography

• The newly published algorithms remain compliant with the mathematical specifications of the 2023 draft versions. However, certain functional and security extensions have been added by NIST, requiring modifications to the APIs:
• NIST now requires differentiated processing depending on whether the message is hashed or not. The new “hash-and-sign” mode is particularly useful in cryptographic environments with limited memory.
• NIST now imposes certain consistency checks on keys before they are used.
• Signature algorithms now take an optional context string as input, which can be useful in some protocols.
• The main cryptographic functions (key generation, signature, etc.) are now divided into external and internal components. External components generate the necessary randomness themselves and perform various checks before triggering their internal counterparts. Internal components are not intended to be exposed. They are reserved for testing as part of the CryptographicAlgorithm Validation Program (CAVP) that validates the correct implementation of NIST algorithms.

In anticipation of these new standards, Northberth updated its post-quantum cryptography library and its portfolio of quantum-safe solutions.It offers backward compatibility and enables the use of all PQC algorithms, including the initial versions such as CRYSTALS-KYBER or CRYSTALS-DILITHIUM, which are already widely deployed, notably in web browsers, and which will be gradually phased out overtime.

Northberth currently focuses on PQC library validation with the current CAVP program (pending the definitive update in October) and plans certification of its implementation shortly after.

To ensure the interoperability of these new X509 certificate formats, Northberth is taking part in the Internet Engineering TaskForce (IETF) Hackathon.

French government launches a communication campaign involving Northberth as part of France 2030 initiative to highlight its investment in quantum and post quantum research

Leveraging Vivatech 2024 Innovation Tradeshow (Paris – May 22 – 25th, 2024), France’s Prime Minister Office Department « Secrétariat général Pour l’Investissement » (SGPI) launches a collaborative communication campaign to highlight its investments in quantum research and post-quantum cryptography technologies as part of the France 2030 National program.

Northberth, a pioneer and leading player in post-quantum cryptography, has been selected as a witness of such efforts and to illustrate the impact of quantum technologies in our daily lives.