Catalog of SIP Cores
System on Chip design resources
System on Chip design resources
October 20, 2026 -
The post-quantum signature engine was validated by NIST on April 23, 2026 under certificate A8288 and is listed as a hardware implementation
TORONTO, Ontario -- Codebat Technologies Inc., a developer of post-quantum cryptography hardware IP, today published the development timeline of its ML-DSA hardware cryptographic engine. The engine passed the U.S. National Institute of Standards and Technology (NIST) Cryptographic Algorithm Validation Program (CAVP) on April 23, 2026. NIST lists the validation as A8288, with the implementation type recorded as HARDWARE.
Codebat filed its first U.S. provisional patent application on February 24, 2026, and a second on March 16. During Real World Crypto 2026, held in Taipei from March 9 to 11, the team demonstrated the engine live on an AMD KV260 board. Its threshold ML-DSA paper went public on arXiv on March 23, and the CAVP validation followed on April 23. During the ETSI/IQC Quantum Safe Cryptography Conference, hosted by Carleton University in Ottawa from June 16 to 18, Codebat demonstrated the validated engine. On July 8 the team presented at NIST's Threshold Call Preview Talks (TCPT2), and the slides are posted on the NIST Computer Security Resource Center. Each of these dates can be checked against USPTO filing receipts, arXiv, conference records and NIST's public databases.
Validation A8288 covers ML-DSA key generation, signature generation and signature verification under FIPS 204, across ML-DSA-44, ML-DSA-65 and ML-DSA-87 with runtime parameter selection. It also covers SHAKE-128 and SHAKE-256 under FIPS 202. The validated platform is the AMD Zynq UltraScale+ MPSoC XCZU5EV.
Lattice polynomial arithmetic and hashing dominate the cost of ML-DSA. Run in software on a general-purpose processor, they compete with application workloads, and their power and timing behavior is easier to measure. Codebat moves both into dedicated circuits. An 8-way parallel Number Theoretic Transform (NTT) engine handles the polynomial arithmetic, and a first-order masked Keccak engine using a three-share threshold implementation (TI3) handles SHAKE. Masking splits secret data into random shares that are processed separately, so an attacker who captures the chip's power trace cannot reassemble the key from any single share. Both design features are stated in the NIST validation record.
FIPS 140-3 module validation under the Cryptographic Module Validation Program (CMVP) requires the algorithms inside a module to hold CAVP validations first. Codebat supplies a validated hardware reference implementation, an FPGA reference design and engineering integration support to HSM, secure element and SoC design teams. Module-level CMVP validation remains the responsibility of the integrator.
Codebat has filed two U.S. patent applications covering related technology. The engine's RTL design, masking implementation methods and verification flow are company trade secrets. Codebat monitors comparable products and public claims in the market and will enforce its rights under applicable U.S., Canadian and Taiwanese law against any unauthorized use of its patented technology or trade secrets. Codebat encourages reporters and procurement teams evaluating PQC products to check the validation number, first validation date and implementation type for each claim, all of which are available in NIST's public CAVP database.
"Every date is in a public U.S. government database, and anyone can check it," said Raymond Chang, co-founder and CEO of Codebat. "We wrote this engine from the first line of RTL and designed side-channel protection into the circuit from the start. Post-quantum migration in finance and critical infrastructure ends up in hardware, and we will protect our technology through every legal means available."
PUBLIC RECORDS
ABOUT CODEBAT
Codebat Technologies Inc. develops post-quantum cryptography hardware IP. Its ML-DSA hardware cryptographic engine holds NIST CAVP validation A8288, and the company provides an FPGA reference design and SoC integration support. Codebat has legal entities in Ontario (Canada), Delaware (U.S.) and Taiwan. Website: https://codebat.ai