Samsung System LSI & Thales: a quantum leap in embedded security

While quantum computers promise remarkable innovations, they also pose a serious threat to today’s cryptographic systems. Advanced attackers could already collect and store encrypted data today, waiting for the moment quantum capability arrives to decrypt it later ('harvest now, decrypt later'). The solution? Post-quantum cryptography (PQC). In this article, we explain why PQC matters, highlight the breakthrough collaboration between Samsung System LSI and Thales, and explore how this innovation is reshaping security at the device edge.

Why is post-quantum cryptography important?

Today, much of our digital security relies on cryptographic systems such as RSA and ECC. However, experts anticipate that quantum computers will eventually be able to break these widely used algorithms. This means any encrypted sensitive data from personal information to critical infrastructure is at risk. In fact, attackers could already be gathering encrypted data, storing it now, and planning to decrypt it later as soon as quantum computers are available.

That is where post-quantum cryptography (PQC), comes in. PQC uses new types of algorithms designed to resist attacks from even the most powerful quantum computers, as well as from today’s classical threats. This is essential to keep our data, devices, and connected world secure both now and for the decades ahead.

What breakthrough have Samsung System LSI and Thales achieved together?

Until now, most implementations of post-quantum cryptography have required the powerful computing resources found in large data centers or the cloud. This kind of processing needs a lot of energy and memory.

The breakthrough we are announcing is that, for the first time, Samsung System LSI and Thales have brought quantum-resistant security directly to the edge: into a tiny embedded Secure Element, known as an eSE, that fits inside even small electronic devices. 

Samsung’s new eSE S3SSE2A chip features two dedicated hardware accelerators expressly for PQC operations. This makes cryptographic processes up to eighteen times faster than all-software approaches. This achievement was recognized by industry experts and won the CES Best Cybersecurity Innovation Award.

And Thales brings its secure operating system and cryptographic libraries into the eSE, designed to take full advantage of the chip’s capabilities. The Thales OS is highly efficient, engineered to minimize memory and power use, and includes built-in protections against side-channel and timing attacks. This deep integration of hardware and software ensures that security is not only robust, but also fast and energy-efficient.

Why does bringing quantum-resistant security to the device edge matter?

Until recently, the most advanced security especially protection strong enough to withstand attacks from future quantum computers was only possible in the cloud or in large, energy-hungry data centers. These environments have the computing capability needed for PQC. 

Now, by embedding quantum-resistant cryptography directly into a secure hardware element like a secure element (eSE), right inside the device, all core security operations, including authentication and encryption, can happen instantly, directly at the edge. This means each device, no matter how small or energy-limited, can protect itself with the most advanced cryptography available.

Today’s connected world includes everything from consumer devices to medical and industrial equipment, carrying critical data that must always remain secure. With PQC built-in at the hardware level, these devices can now match the security standards once reserved for much larger systems. Users get robust privacy and integrity protections from the very first boot, and devices remain agile in the face of new threats, safeguarding personal, medical, or operational data well into the future.

How does the solution meet global standards and industry certifications?

The Samsung and Thales solution is closely aligned with the latest guidance from the National Institute of Standards and Technology (NIST) on post-quantum cryptography, including support for the ML-KEM (Module-Lattice Key Encapsulation Mechanism, FIPS 204) algorithm. The architecture is “crypto-agile,” which means it can easily adapt to updated algorithms without needing hardware replacements. This is crucial as standards continue to evolve.

The Secure Element is designed to meet high-level security certifications such as Common Criteria Evaluation Assurance Level 6+ (EAL6+), offering robust safeguards against both physical tampering and cyberattacks. It defends against today’s threats and those we expect in the quantum era.

Why did Samsung System LSI choose Thales as a technology partner for quantum-resistant security?

Samsung System LSI chose Thales for its global leadership in cybersecurity and its decades-long track record of innovation and certification. Importantly, the partnership was built on deep integration and joint engineering work, spanning regions and time zones, to co-develop a unified chip and software stack. This close collaboration enabled a truly breakthrough solution one that sets a new gold standard for embedded security and ensures future-proof protection for billions of devices worldwide.

Thales leads the industry on PQC. It set the pace by prioritizing quantum-resistant security years ahead of the curve, backing it with strong investments, active roles in global standardization, and cutting-edge development across all our markets.

The final word

This partnership signals the dawn of a new era in embedded security, putting next-generation quantum-resistant protection directly into the hands of device makers worldwide. Our shared vision is clear: to lead the way as threats evolve, proactively shaping the future of secure connectivity through bold innovation and determination. For Samsung System LSI and Thales, this breakthrough is just the start, we are dedicated to driving the industry forward and ensuring post-quantum cryptography becomes the standard that keeps the world’s data safe for decades to come.