Modern computing systems rely on multiple layers of security. Encryption protects data, authentication verifies users, and applications enforce security policies. Yet before any of these mechanisms can be relied upon, the underlying platform itself must be trusted.

This raises a basic question: where does trust begin?

When a device powers on, something must be trusted without being verified, because there is nothing to verify it. This is the root of trust. To ensure its integrity, a strong root of trust is built directly into hardware, making it significantly harder for an attacker to alter or bypass its security functions.

NIST defines roots of trust as highly reliable hardware, firmware and software components that perform specific, critical security functions. Because they are inherently trusted, they must be secure by design, so that they can be trusted without verification.

A Hardware Root of Trust is where the trust chain starts. The root of trust checks the bootloader’s signature before letting it run. The bootloader checks the operating system the same way. The operating system can verify the components it loads next, such as drivers. If any check fails, the sequence stops. No stage trusts the next one blindly, so trust is passed forward rather than assumed. This is known as secure boot. Measured boot takes a different approach: it records measurements of components loaded during startup so that the device’s boot state can later be assessed through attestation.

2. The challenge: software cannot establish its own trust

Security software runs on top of the operating system. The operating system runs on top of firmware. Each layer trusts the one below it.

LoJax, discovered by ESET in 2018, was the first UEFI rootkit found in the wild. It was written into the UEFI firmware of Windows computers and survived operating system reinstalls and even hard drive replacement. This made it difficult to detect or remove with security tools running in the operating system. On every boot, it put the attacker’s malware back into the system. According to ESET, properly enabled Secure Boot would have blocked it, because its firmware module was not validly signed.

Controls in or above a compromised layer may be unable to establish independently whether the platform beneath them can be trusted. Hardware-based security mechanisms can provide a protected foundation for determining whether firmware has been modified and whether software loaded during startup is authentic.

3. What a resilient platform must do

A device without these protections cannot easily detect or recover from attacks. If its firmware is compromised, recovery usually requires manual, often physical, intervention, which is impractical across a large number of devices.

A secure platform exhibits the following capabilities:

• The firmware cannot be changed by unauthorised parties. A new version is installed only if its signature is valid, and the settings the firmware relies on are also protected against unauthorised changes. Older, vulnerable versions cannot be reinstalled either.
• The platform notices if the firmware has been changed without authorisation or corrupted. Protection is never 100% complete, and some parts of a system are harder to fully protect than others.
• The platform can repair itself. If the firmware in use has been altered, the device restores a known good copy, either from protected memory that software cannot write to or from another trusted source that the compromised firmware cannot interfere with. This enables recovery without requiring manual reprogramming of the device.

These capabilities depend on roots of trust that cannot themselves be modified or bypassed by the firmware they are intended to protect. NIST describes distinct roots of trust for functions such as update, detection and recovery.

4. What a Hardware Root of Trust enables

Once a trusted hardware foundation is in place, higher-level security services can be built on it. Many platform protections that look like separate features in fact rely on the same underlying root of trust. Which services are needed depends on the system and its requirements. Some common examples are:

• a unique and verifiable device identity
• protection of cryptographic keys against unauthorised access
• verification of firmware before execution through secure boot
• measurement of platform integrity during startup
• remote attestation

Together, these allow a system not only to start securely, but also to prove its integrity to a remote party.

5. Trust throughout the device lifecycle

Before a device reaches the customer, it has been assembled, shipped and handled by several companies. After that it stays in use for years. A component can be swapped during manufacturing. Firmware can be changed in transit. Both can be changed again during service.

The device needs an identity built into the hardware, and the buyer or operator needs a way to check that identity later: is this the device we ordered, and is it still running what it should be?

This matters most where one device with altered firmware affects a whole service. Cloud and edge infrastructure, industrial automation and telecommunications networks, satellite systems and defence technologies are security-critical environments where the integrity of core elements is crucial.

Regulation is moving in the same direction. From 11 December 2027, products with digital elements placed on the EU market will have to meet the cybersecurity requirements of the Cyber Resilience Act. Manufacturers’ obligations to report actively exploited vulnerabilities and severe incidents have already applied since 11 September 2026. The requirements cover design, development and maintenance, and manufacturers have to handle vulnerabilities throughout the product’s support period. They also include protecting the integrity of software and configuration against unauthorised changes. A Hardware Root of Trust is one way to meet these integrity requirements.

6. Why is Hardware Root of Trust becoming more important now?

Three things have changed.

There are far more devices. A system that once ran on a few machines in a locked room now runs on thousands, spread across geographically distant sites and unsecured environments. Physical security no longer covers them, so each device has to be able to prove its integrity.

Devices stay in service for a long time. A device sold today may still be receiving firmware updates many years from now. The component that verifies those updates has to remain trustworthy for as long as the device is in use.

There is an ongoing transition in the public-key cryptographic algorithms used for functions such as digital signatures. A sufficiently powerful quantum computer could break widely used public-key algorithms such as RSA and elliptic-curve cryptography. The timeline for such a computer remains uncertain, but long-lived devices deployed today may still be in service when current public-key algorithms are no longer considered secure.

This matters for Hardware Root of Trust implementations that rely on digital signatures to authenticate firmware. Long-lifecycle systems therefore need to plan for quantum-resistant algorithms from the start. One way to do this is to support both classical and quantum-resistant signatures in the hardware, allowing the system to transition to quantum-resistant signatures when needed without replacing the platform.

7. Conclusion

A Hardware Root of Trust is not one more security feature added to a platform. It is the foundation that lets every other security mechanism do its job in a trusted manner.

Depending on its implementation, a Hardware Root of Trust can anchor firmware verification, protect cryptographic keys, establish device identity and support platform integrity measurement and attestation.

Firmware attacks keep improving and systems keep getting more connected. Building trust into the hardware needs to be a foundational design decision, not an afterthought.

Reija Stenroos

Marketing Director, Xiphera

Sources:

1. NIST, Roots of Trust project. https://csrc.nist.gov/projects/hardware-roots-of-trust
2. NIST SP 800-193, Platform Firmware Resiliency Guidelines, May 2018. https://doi.org/10.6028/NIST.SP.800-193
3. ESET Research, LoJax: First UEFI rootkit found in the wild, courtesy of the Sednit group, September 2018. https://www.welivesecurity.com/2018/09/27/lojax-first-uefi-rootkit-found-wild-courtesy-sednit-group/
4. NIST CSWP 36B, Using Hardware-Enabled Security to Ensure 5G System Platform Integrity, March 2026. https://www.nccoe.nist.gov/5g-cybersecurity
5. NIST IR 8320, Hardware-Enabled Security: Enabling a Layered Approach to Platform Security for Cloud and Edge Computing Use Cases, May 2022. https://doi.org/10.6028/NIST.IR.8320
6. Trusted Computing Group, TPM 2.0 Library Specification. https://trustedcomputinggroup.org/resource/tpm-library-specification/
7. Trusted Computing Group, DICE Layering Architecture, Version 1.0, Revision 0.19, 2020. https://trustedcomputinggroup.org/wp-content/uploads/DICE-Layering-Architecture-r19_pub.pdf
8. Trusted Computing Group, DICE Attestation Architecture, Version 1.0, Revision 0.22, December 2020. https://trustedcomputinggroup.org/resource/dice-attestation-architecture/
9. NIST SP 1800-34, Validating the Integrity of Computing Devices, December 2022. https://doi.org/10.6028/NIST.SP.1800-34
10. Regulation (EU) 2024/2847 (Cyber Resilience Act). https://eur-lex.europa.eu/eli/reg/2024/2847/oj
11. NIST IR 8547, Transition to Post-Quantum Cryptography Standards, Initial Public Draft, November 2024. https://doi.org/10.6028/NIST.IR.8547.ipd

For Xiphera, information security is a key part of developing hardware-based cryptographic IP for FPGAs, ASICs and SoCs. The certification gives customers and partners additional confidence that information is handled securely and according to internationally recognised standards.

“Information security is at the core of everything we do. Achieving ISO/IEC 27001 certification shows that we have strong processes in place to protect our information, our customers’ information, and our business. It also supports our commitment to continuous improvement,” says Timo Lilja, IT Manager at Xiphera.

The certification supports Xiphera’s work with customers in industries where security is critical, including defence, space, telecommunications and industrial systems.

“Our customers trust us to develop security technologies for some of the world’s most demanding applications. ISO/IEC 27001 certification is an important milestone that demonstrates our commitment to secure engineering, operational excellence and continuous improvement,” says Matti Tommiska, CEO of Xiphera.

For more information:
Matti Tommiska
CEO
Xiphera Ltd.
matti.tommiska@xiphera.com

About Xiphera

Xiphera provides hardware-based security solutions with strong cryptographic expertise. By implementing cryptographic algorithms directly in hardware, Xiphera reduces security risks, protects critical data, and ensures systems function as intended in demanding environments. Xiphera’s portfolio includes over 30 IP cores used across industrial, telecommunications, data centres, defence, space, and other security-critical applications.

Yasuhiro Okumura brings to Xiphera 39 years of extensive experience in the high-tech industry, with over 30 years in senior leadership roles at global technology firms, where he successfully served as Country Manager for Japan and VP of Sales for Asia. He has a proven track record of driving business growth, developing new markets, and delivering strong sales results through strategic leadership and deep technology expertise.

As demand for cybersecurity and secure semiconductor technologies continues to grow, Japan continues as a strategically important market for Xiphera. Strengthening our local presence enables us to offer security solutions that meet local requirements, support our customers and partners with close collaboration – and to expand our business in the region.

“We are pleased to welcome Okumura-san to the Xiphera team,” said Tommi Lampila, CRO of Xiphera. “His experience, industry network, and market knowledge will play an important role as we continue to build our presence and serve critical industry sectors in Japan.”

“I am thrilled to join the team and take on the role of Country Manager in Japan. Japan remains a dynamic and vital market, and I look forward to leveraging my experience to build strong partnerships, support our clients, and drive our growth here,” said Okumura, Country Manager for Japan at Xiphera.

For more information:

Yasuhiro Okumura
Country Manager, Japan

yasuhiro.okumura@xiphera.com
+81-90-8893-8224

Tommi Lampila
CRO
tommi.lampila@xiphera.com
+358 40 162 2503

As satellites generate and transfer increasing amounts of data, communications infrastructure must evolve to support higher bandwidths without compromising security. The project addresses this challenge by combining high-speed data protection with the performance requirements of next-generation space systems.

The project builds on Xiphera’s experience in developing hardware-based cryptographic IP and security solutions for demanding applications in the space, defense, telecommunications, and industrial sectors.

“We are excited to work with ESA on this project and contribute our expertise in hardware-based cybersecurity to future space systems,” said Petri Jehkonen, Director of Strategic Programs at Xiphera. “Future satellite constellations will rely on high-speed optical links capable of transferring massive amounts of data. Security must be built into these systems without compromising performance. This project gives us an opportunity to develop technologies that help address exactly that challenge.”

“The ARTES programme strengthens European sovereignty in core technologies for our space infrastructures, including cybersecurity and high-speed hardware cryptography. We look forward to contributing Xiphera’s subject-matter expertise in these fields to the European space ecosystem,” said Tommi Lampila, Chief Revenue Officer at Xiphera.

The project supports the development of technologies needed for future satellite constellations, where both ultra-high data rates and strong cybersecurity are essential requirements.

According to Chris Morrison, VP Product Marketing at Agile Analog: “As the industry prepares for the post-quantum era, we can no longer afford to view digital cryptography and physical security as separate silos. SoC designers face an increasingly complex threat landscape, demanding security solutions that are both secure and easy to integrate. Our collaboration with Xiphera addresses this challenge. By pairing their cryptographic modules with our configurable process-portable analog security IP, we are giving customers a comprehensive defense solution and meeting the growing security and system-level protection requirements in modern semiconductor designs.”

Xiphera’s PQC algorithms offer essential, mathematically robust protection against future quantum threats. While cryptographic algorithms protect data and communications, semiconductor devices must also be protected against physical attacks and tampering. Combining Xiphera’s quantum-resistant cryptographic IP with Agile Analog’s anti-tamper sensor IP provides comprehensive security approach for modern semiconductor designs. Integrating Xiphera’s quantum-resistant digital logic with Agile Analog’s real-time analog glitch and tamper detection helps strengthen protection at both the digital and physical levels.

Chris Morrison from Agile Analog concludes: “A truly secure semiconductor design requires safeguarding both the digital and physical domains. Robust digital cryptography is the foundation of data protection, but further protections are needed against physical manipulation of the underlying silicon.   By combining Xiphera’s world-class cryptographic IP with our advanced analog glitch and tamper detectors, we eliminate these vulnerabilities. Together, we provide designers with a complete, multi-layered security subsystem that protects chips from both remote cyber threats and direct physical attacks.”

About Xiphera

Xiphera provides hardware-based security solutions with strong cryptographic expertise. By implementing cryptographic algorithms directly in hardware, Xiphera reduces security risks, protects critical data, and ensures systems function as intended in demanding environments. Xiphera’s portfolio includes over 30 IP cores used across industrial, telecommunications, data centres, defence, space, and other security-critical applications. As a Finnish-founded, European-owned company, Xiphera delivers trusted security designed and developed in Europe.

About Agile Analog

Agile Analog is transforming the world of analog IP with Composa™, its innovative, highly configurable, multi-process analog IP technology.Headquartered in Cambridge, UK, with a growing number of customers across the globe, Agile Analog has developed a unique way to automatically generate analog IP that meet the customer’s exact specifications, for any foundry and on any process, from legacy nodes right up to the leading edge.

The company provides a wide-range of novel analog IP and subsystems for data conversion, power management, IC monitoring, security and always-on IP, with applications including; data centers/HPC, IoT, AI and security. The digitally wrapped and verified solutions can be seamlessly integrated, significantly reducing complexity, time and costs, helping to accelerate innovation in semiconductor design. For more information visit: www.agileanalog.com

Advancing European semiconductor self-sufficiency and secure technologies

The SecureSoC project focuses on the development of system-on-chip (SoC) solutions that will provide a foundation for secure, high-performance products across industry, defence, automation and other critical sectors. The project is based on a security-by-design approach, incorporating AI-assisted verification methods and building on the outcomes of the earlier SoC Hub initiative.

The new project is launched in response to a significant change in the operating environment. Under the EU Cyber Resilience Act (CRA), all network-connected products placed on the European market will be required to meet hardware-level cybersecurity requirements by 2027.

“Cybersecurity is becoming increasingly important in light of the current climate of global uncertainty and advances in quantum computing, which threaten the integrity of existing cryptographic algorithms.The SecureSoC project, coordinated by Tampere University, represents a natural continuation of the SoC Hub community’s efforts to strengthen expertise in secure chip technologies. Within this project, the University will undertake research that will, for example, support the advancement of our digital and analogue components towards commercial readiness.SecureSoC is also the first initiative under SoC Hub in which Tampere University engages in close collaboration with OpenTitan, an open-source silicon Root of Trust (RoT) project, as an official research partner,” says Pekka Jääskeläinen, Professor of Computer Sciences at Tampere University.

Industry partners contribute specialist expertise

The industry partners involved in SecureSoC bring strong specialist expertise to the project, spanning hardware-level cybersecurity, software development and system-level design. This university-industry collaboration enables a comprehensive approach in which security, performance and usability are integrated into a coherent whole from the earliest stages of the design process.

“A key strength of the SecureSoC project lies in the complementary expertise of the partners. VLSI Solution contributes specialist expertise in compact system-on-chip (SoC) design and RISC‑V-based processing, reinforced by the capabilities of the other consortium members in hardware-based cybersecurity, cryptography and system-level security. VLSI Solution aims to leverage the expertise generated through the project in the development of both next-generation secure, network-connected SoCs and customer-specific solutions,” says Teppo Karema, CEO of VLSI Solution.

“Security must be built into technology from the chip level upwards.SecureSoC provides Xiphera with an opportunity to integrate our hardware-based cybersecurity and cryptographic IP solutions into next-generation Finnish semiconductor architectures, while strengthening national expertise in the development of secure digital systems,” says Petri Jehkonen, Director of Strategic Programs at Xiphera.

The significance of safety extends from technical solutions to broader societal goals, including digital sovereignty and security of supply.

“In the future, secure system-on-chip solutions will be as important to digital sovereignty and security of supply as networks, software and communications systems.Through the SecureSoC project, Insta is contributing to the development of expertise and technologies that strengthen both Insta’s and Finland’s ability to develop domestically produced, high-assurance hardware-based systems, with security extending across the entire supply chain,” says Tatu Männistö, Senior Director of Technology at Insta Advance Oy.

In practical applications, safety also encompasses the manageability and reliability of systems throughout their entire life cycle.

“Wapice works with its customers to develop systems that are integrated into critical societal infrastructure. Increasing system connectivity, growing software complexity and the resulting maintenance demands require a seamless chain of trust extending from the chip level to application software. Within the SecureSoC project, Wapice is developing next-generation, quantum-secure cybersecurity solutions to protect edge devices and their software, ensuring end-to-end security throughout the system lifecycle”, says Sakari Junnila from Wapice.

“Secure SoC provides Nokia with a powerful co-innovation environment to advance next-generation system-on-chip design and talent. We are applying artificial intelligence to accelerate design and verification, while progressing virtual environments and digital twins to enable earlier software development and validation. This work strengthens our expertise and drives faster, more efficient SoC development,” said Derek Urbaniak, Head of RAN RD SoC at Nokia.

SecureSoC lays the foundation for long-term semiconductor development in Finland

The evaluation framework developed within the SecureSoC project will also serve as a foundation for Finland’s emerging semiconductor IP roadmap and marketplace. It will provide a platform for integrating, testing and validating reusable IP blocks, subsystems and future SoC derivatives.

SecureSoC is therefore not only an individual research project but also lays the groundwork for the sustained development of semiconductor technologies in Finland.

As artificial intelligence moves beyond the digital realm and into our physical world, it brings unprecedented opportunities and risks. These systems power everything from autonomous vehicles to smart infrastructure, and they’re no longer just processing data. They’re interacting with environments, making real-time decisions, and handling sensitive data.

From agriculture to surgery and transportation, physical AI and robotics are transforming industries. Robots assist in planting, harvesting, and crop health monitoring, while AI-driven systems revolutionize surgery and Unmanned Aerial Vehicles (UAVs) play a strategic role in logistics, environmental monitoring, public safety and mission-critical operations. As their role expands, so does the urgency to secure them effectively.

The Risks of Unsecured Physical AI and Robotics

AI and robotics are not immune to security risks. As these systems move from digital environments into the physical world, the attack surface expands dramatically, turning every component into a potential target. Without robust cryptographic security solutions, physical AI systems become vulnerable to unauthorized access and tampering.

Attacks on physical AI and robotics platforms fall into two categories: physical attacks and digital attacks. Physical attacks involve the act of physically manipulating hardware with the aim of either disrupting function or obtaining unauthorized access. Digital attacks mainly concern software-related attacks that aim to exploit the vulnerabilities within the physical AI system’s software components. Both may lead to serious consequences for data and safety in the physical world.

Xiphera’s hardware-based security protects critical functions at the hardware level, reducing exposure to these threats.

Physical Attacks

Robust cryptographic solutions and hardware-based security are crucial in mitigating physical attacks (Security Considerations in AI-Robotics: A Survey of Current Methods, Challenges, and Opportunities, 2023). These include physically damaging sensors, spoofing, jamming, and manipulation.

Spoofing involves manipulating sensor data, communication signals, or environmental inputs to deceive the AI system into perceiving false reality. One example is LiDAR spoofing, which entails injecting fake laser returns to make a robot “see” obstacles or paths that don’t exist. This can disrupt the robot’s navigation system.

Hardware-based cryptography can significantly reduce the risk of spoofing in robotic systems by ensuring the authenticity, integrity, and confidentiality of sensor data, communication, and control signals. In the LiDAR example, hardware-based solutions can prevent attackers from injecting fake sensor data by using cryptographic data verification.

Another physical attack method is jamming, which refers to overwhelming a physical AI system’s sensors or communication channels with noise, false signals, or excessive data. The goal is to deny service, degrade performance, or force the physical AI system into unsafe operating conditions. Examples of jamming attacks include disrupting military drones with RF noise to force them to land or return to base.

While hardware-based cryptography cannot directly affect physical vulnerabilities of physical AI systems, it can mitigate the impact of jamming and improve overall system resilience by verifying the integrity and origin of received data. By implementing hardware-based encryption (e.g. AES-GCM or AES-XTS) for secondary communication channels, the physical AI system can switch to a secure channel if the primary channel is compromised. Cryptographic keys remain secure for establishing trusted connections post-jamming.

Finally, let’s talk manipulation. Some studies have brought to light the vulnerability of Inertial Measurement Unit sensors (IMUs) employed in robotic systems. Targeted attacks aim to disrupt velocity measurement, which can cause physical AI systems to lose control, leading to accidents and malfunctions.

Hardware-based cryptography can detect tampering, ensure data integrity, and mitigate the impact of physical attacks. If an attacker manipulates IMU data (e.g. by injecting false signals or altering readings), the cryptographic signature will fail verification, and the system rejects tampered data. Hardware-based secure boot ensures that only authenticated firmware runs on both the IMU and the physical AI system’s control unit.

Other Attacks

Physical AI and robotics systems can also suffer from other common cybersecurity attacks, such as backdoor attacks, malware and ransomware.

A backdoor attack is a stealthy technique of bypassing normal authentication methods to gain unauthorized access to a system and remotely control it. Malware can target systems such as surgical robots, enabling the attacker to track the movements of the robot’s arm and trigger the attack payload during important tasks. Ransomware attacks in the context of industrial robots attempt to lock them to extort ransom from the manufacturer.

Hardware-based cryptography can mitigate these risks by preventing unauthorized or malicious firmware (containing backdoors, malware or ransomware) from executing and authorizing only authenticated, unaltered code runs.

The consequences of unsecured physical AI and robotics are severe. Compromised systems in autonomous vehicles, surgical robots, or industrial machinery can lead to accidents, injuries, or even fatalities. Sensitive data breaches expose users and organizations to harm, while critical infrastructure disruptions result in downtime, financial losses, or safety hazards.

These examples are just a glimpse of the risks posed by unsecured physical AI and robotics. They highlight the urgent truth: cryptographic security solutions are essential to safeguarding the integrity, reliability, and safety of AI-driven systems in our physical world.

More on Why Hardware-Based Security is a Game Changer

We’ve explored how hardware-based cryptography protects physical AI systems and touched some of its advantages along the way. Let’s bring these benefits together to see why it’s a true game changer.

Hardware-based cryptography addresses the challenge of keeping physical AI and robotics systems secure by embedding security directly into the physical components of a device. Hardware-based security is more resistant to tampering, reverse engineering, and malicious modifications, making it ideal for physical AI applications where unauthorized access could have catastrophic consequences.

Trust in physical AI and robotics systems needs to be founded on consistent reliability, which is something updatable software cannot provide. Security architectures like hardware root of trust and secure boot are not only designed as inherently trusted foundations, but they also make sure that after initiation, the integrity and authenticity of firmware and configuration of a device is verified, which counters logical attacks. Additionally, a secure update mechanism ensures that when logical vulnerabilities are identified, they can be mitigated.

Security isn’t just about protection; it’s also about performance. Physical AI and robotics often demand real-time decision-making, where even milliseconds of delay can make the difference between safety and disaster. Software-based cryptography often introduces latency, creating bottlenecks that compromise real-time responsiveness. Hardware-based cryptography offers optimised latency and ensures consistent, predictable execution of security operations. By offloading these tasks to dedicated hardware, systems can maintain the precision, speed and reliability required for life-critical applications.

Hardware security IP is optimized for specific cryptographic tasks, consuming significantly less power compared to software. This efficiency is critical for battery-powered robots, drones, and edge AI devices, where energy consumption directly affects operational lifespan.

Hardware-based cryptography doesn’t just secure physical AI and robotics. It enables them to operate at their full potential, delivering both trust, energy efficiency, and real-time performance.

Conclusion

In the age of physical AI and robotics, security is everything. Digital attacks and physical attacks like spoofing, jamming, and manipulation threaten not only the functionality of these systems but also the safety and security of environments and people they interact with.

Hardware-based cryptography provides a robust foundation for securing physical AI and robotics. By embedding security directly into hardware, we can authenticate sensor data, protect communication channels, and ensure the integrity of critical systems. Hardware-based solutions offer resilience against tampering, real-time performance for life-critical applications, and energy efficiency for battery powered devices.

Xiphera specialises in hardware-based security, addressing the unique challenges of physical AI and robotics with solutions that are as innovative as they are reliable. As these technologies continue to evolve, so must our commitment to safeguarding them. The future of AI and robotics isn’t just about what they can do; it’s about ensuring they can do it securely, efficiently, and without compromise.

By prioritizing hardware-based security today, we pave the way for a safer, more trustworthy integration of physical AI and robotics into our daily lives. This way we’re protecting not just the systems themselves, but the people and industries that depend on them.

Sources:

Neupane et al. (2023): “Security Considerations in AI-Robotics: A Survey of Current Methods, Challenges, and Opportunities”. IEEE Access (Peer-reviewed journal by the Institute of Electrical and Electronics Engineers).

Sara Brax

Marketing Coordinator, Xiphera

“When I joined the team, Xiphera’s marketing already had a strong foundation. That made it easier to develop new, measurable strategies”, she states when asked, how Xiphera’s marketing strategy has changed in the past year. “For me, measurability is key. It’s essential to track what works and what doesn’t, using data to guide our actions.”

With a strong background in sales, Reija emphasizes the importance of aligning marketing and sales within a company. “It’s been great to see how closely sales and marketing work together here at Xiphera,” she says. “I believe it’s important that marketing and sales communicate openly. Everything we do in marketing helps move the business forward, whether the results come quickly or over time. To me, it doesn’t make sense to keep the two separate.”

Beyond strengthening Xiphera’s industry presence, Reija focuses on keeping a steady flow of inbound leads. “Because of my sales background, I focus on bringing in new opportunities and keeping the pipeline active. At the end of the day, marketing helps drive revenue.”

Reija began her career at Xiphera working remotely from home, which made it harder to break into the industry. Without her colleagues nearby, she struggled to get into cryptography. During her first year at Xiphera, a positive change has been the company’s expansion to Tampere, where we now have an office.

For Reija, one of the best things in her role at Xiphera, is that marketing is truly valued. She feels trusted in her expertise and has the freedom to explore different ways of doing marketing.

“Cryptography isn’t the easiest subject for sure, but from day one I’ve been supported by experts and am learning something new every day. That’s what makes this role so interesting,” Reija says.

“We want to be one of the world-recognized experts and leaders in hardware-based security and cryptography, and to achieve that, we need to systematically build our brand image on all platforms. Since I started at Xiphera, we have continued to develop our marketing capabilities and strengthen our visibility across key channels. This creates opportunities to make our marketing even more impactful and better support the company’s growth.”

Xiphera’s marketing focuses on further developing our brand, website, and user experience, while also strengthening our visual identity. By closely tracking user flows, we ensure every interaction is intuitive, helping people find exactly what they need, faster and with ease.

Why? Because we believe that great design is not just about aesthetics. It’s about creating seamless experiences that connect with our audience.

Reflecting on the past year, Reija pauses for a moment before smiling and summing it up:

“A year of stepping outside of my comfort zone and embracing constant learning. Cryptography is a field where there’s always more to discover and accepting that I can’t know everything has been tough. The challenges are real, but so are the rewards. It’s exciting to market Xiphera’s world-class solutions, especially at a time when cybersecurity is more important than ever.”

The findings highlight a clear concern. Around 50% of GEO satellite links still transmit unencrypted IP traffic. While encryption has long been standard for satellite TV, many IP-based communications lack sufficient link- and network-layer protection. As a result, sensitive data can be exposed.

Encryption gaps in satellite networks

The study further shows that network-layer encryption, such as IPSec, is rarely used in private satellite networks. Unlike the public internet, where TLS is standard, internal satellite communications often remain unprotected.

At the same time, this is not just a theoretical risk. According to Financial Times, Russian satellites have maneuvered close to European communication satellites and may have intercepted or monitored their data traffic, in some cases remaining nearby for weeks. The situation is particularly concerning because some older satellites still rely on unencrypted links, including control and command channels, increasing the risk of exposure.

What this means for organisations and how to secure satellite communications

Taken together, these findings highlight a clear reality: satellite communications are both vulnerable and actively targeted. Organisations relying on GEO satellites may be exposing sensitive data, from operational systems to internal communications, without realising it. The long-standing assumption that satellite links are inherently secure no longer holds.

This is where Xiphera can make a real difference. With hardware-based, quantum-resistant cryptographic solutions, Xiphera helps satellite operators secure their networks from the ground up.

Xiphera’s portfolio covers the full spectrum of satellite security from Secure Boot and TRNG to AES-256-GCM and post-quantum cryptography, enabling protection across both link and network layers.

Fully hardware-based designs reduce attack surface and ensure reliable operation in space. With Xiphera, satellite operators can protect sensitive data, prevent leaks, and strengthen their systems against current and future threats.

Conclusion

Satellite links can no longer be assumed secure. In a world where both technical vulnerabilities and geopolitical threats are increasing, security must be built in by design, from the ground up.
Learn more about how Xiphera secures satellite systems.

Read the full research here: Don’t Look Up: There Are Sensitive Internal Links in the Clear on GEO Satellites
Read Financial Times article here.

Reija Stenroos

Marketing Director, Xiphera

Kimmo Järvinen is a hardware cryptography engineer and researcher with nearly 20 years of experience in the field. He has authored more than 60 scientific publications on cryptography, cryptographic engineering, and secure embedded systems, and holds a PhD in electrical engineering from Helsinki University of Technology.

According to Järvinen, post-quantum cryptography will be an important part of the future, but it will not replace the rest of the cryptographic toolbox.

Why quantum computers threaten some cryptography

The main risk posed by quantum computing targets public-key cryptography. Algorithms such as RSA and elliptic curve cryptography rely on mathematical problems that are extremely difficult for classical computers to solve. However, if sufficiently powerful quantum computers become available, Shor’s algorithm could solve these problems significantly faster.

This means an attacker could derive private keys from public keys, breaking the security assumptions behind widely used cryptographic systems.

“This is why post-quantum cryptography is being developed,” Järvinen explains. “If large-scale quantum computers become available, the mathematical foundations of current public-key systems would no longer provide sufficient security.”

As a result, new algorithms such as ML-KEM and ML-DSA are being standardized to replace vulnerable public-key methods.

Not all cryptography is vulnerable to quantum attacks

Despite the attention given to post-quantum cryptography, quantum computing does not threaten all cryptographic algorithms. Secure systems also rely on symmetric encryption, hash functions, and random number generation, which remain essential even in the post-quantum era.

For example, symmetric encryption algorithms such as AES are not broken by known quantum algorithms. The theoretical advantage provided by Grover’s algorithm can be mitigated by increasing key sizes, for example, by using AES-256.

This means that much of the cryptographic infrastructure used today will continue to play a key role in secure systems.

Cryptography is a system, not a single algorithm

Modern security protocols combine multiple cryptographic components, each serving a specific purpose. A good example is HTTPS. When a browser connects to a server, the TLS handshake uses public-key cryptography to authenticate the server and establish a shared secret. Once the secure session has been established, the actual data exchange is protected using symmetric encryption, typically AES.

“In real systems, cryptography always works as a combination of algorithms,” Järvinen says. “Public-key cryptography is just one part of the overall security architecture.”

Why hybrid cryptography is emerging

Another reason the transition will take time is the relative novelty of post-quantum algorithms. Although they have been carefully studied and standardized, classical algorithms such as RSA and elliptic curve cryptography have been analyzed for decades. Because of this, many experts recommend to use hybrid approaches.

Hybrid cryptography combines traditional public-key algorithms with post-quantum algorithms. This ensures security even if weaknesses are discovered in newly introduced PQC methods.

Conclusion

Post-quantum cryptography will play an important role in preparing for a future where quantum computers may exist. One of the key concerns is the so-called “harvest now, decrypt later” threat, where encrypted data is collected today and stored in the hope that future quantum computers could eventually break the encryption.

But post-quantum cryptography will not replace the full set of cryptographic technologies used today. Instead, future systems will rely on layered security architectures, combining classical and post-quantum cryptography. “Quantum-safe algorithms are essential for the future,” Järvinen concludes. “But secure systems will always require more than just one type of cryptography.”

At Xiphera, we design hardware-based cryptographic IP cores that support both classical and post-quantum algorithms for FPGA and ASIC designs. If you are evaluating how to build quantum-safe systems or planning your cryptographic transition, our team is happy to discuss secure architecture options.