FORTRESS Explained #2

FORTRESS Explained #2:

What is a Root of Trust? A Root of Trust (RoT) is the foundational security component of a computing device and the cornerstone of its overall security architecture. Usually implemented in hardware, it serves as an unalterable trust anchor, providing a variety of cryptographic services to the wider system. In particular, it starts the trust chain of secure boot by verifying and launching the very first mutable software components. Once an operating system or application is running, the RoT can be used to encrypt messages or verify the authenticity of digital signatures, all while keeping the cryptographic keys strictly secure within the RoT itself.

Why does this matter? A chain of trust is only as strong as its anchor. If the foundation is compromised, every subsequent security measure built on top of it falls apart. A hardware-based RoT ensures that the device is protected against a wide spectrum of threats. It defends against malware and other remote software attacks by tightly controlling the boot process and restricting access to cryptographic keys. Without a trustworthy RoT, the entire security concept collapses.

In FORTRESS, we address this challenge by exploring and developing the RoT for the next generation of devices. Because hardware cannot be easily updated once deployed, it is critically important to address the threat of quantum computers right from the start. We do this by designing a RoT based on PQ/T (Post-Quantum / Traditional) hybrid cryptography to build a lasting foundation for security that protects devices now and in future.