QRoot Lite™ IP

Lightweight and Configurable Root-of-Trust Soft IP

QRoot Lite™ is a silicon IP solution designed specifically for resource-constrained MCUs and IoT devices. It provides essential security capabilities including secure boot, device attestation, and sealed storage. Built on the industry-standard TCG MARS specification, QRoot Lite™ simplifies integration, reduces costs, and accelerates your journey toward regulatory compliance and trusted embedded products.

Book an IP evaluation Contact sales

QRoot Lite™ is for teams building secure ASICs & SoCs with tight area and power budgets

  • SoC & ASIC Design Teams
    Embedding root-of-trust directly into silicon designs without external TPMs.
  • Embedded Platform & Security Architects
    Adding secure boot, attestation, and key protection to low-power MCUs.
  • OEMs & Product Companies
    Building smart sensors, medical devices, gateways, and other connected products that require hardware-level trust.
  • Compliance-Driven Teams
    Meeting customer or regulatory requirements for attestation, firmware validation, and device integrity without complexity.

IoT devices

Reduce Silicon Footprint

Minimize silicon area and cost with a lightweight security IP block optimized for constrained microcontrollers and low-end SoCs

IoT devices

Accelerate Integration

Streamline secure boot and device attestation integration using straightforward APIs and standard interfaces, freeing engineers for core tasks

IoT devices

Meet Compliance Easily

Quickly achieve industry and regulatory security standards by integrating proven, standards-based (TCG MARS) root-of-trust capabilities

Future-Proof Security

Leverage evolving cryptographic standards and open specifications to ensure your embedded products stay secure and relevant long-term

Lower Overall Costs

Eliminate external TPMs and reduce complexity, lowering both development and Bill-of-Materials costs for embedded products

Secure by Design

Implement secure boot, firmware attestation, and sealed storage directly into your silicon, protecting devices against counterfeiting, tampering, and unauthorized firmware

Lightweight, Configurable Security

QRoot Lite™ is optimized for minimal silicon footprint (~25k gates), making it ideal for resource-constrained microcontrollers and IoT SoCs.

Rapidly implement secure boot and attestation capabilities without significant area, cost, or complexity overhead.

Secure Boot & Firmware Integrity

Protect your devices at boot-time by ensuring only authorized firmware and software run, verified through trusted measurements and cryptographic signatures.

Prevent malicious software attacks, unauthorized access, and firmware tampering to safeguard critical device functionality.

Standards-Based Attestation

QRoot Lite™ fully aligns with the Trusted Computing Group’s MARS specification, providing standard attestation and measurement reporting (PCR/TSR).

Achieve compliance with industry standards effortlessly, enabling your product to meet rigorous security regulations and customer demands.

Sealed Storage (Key Protection)

Safely store cryptographic keys and sensitive data by cryptographically binding storage to the device identity and its verified state.

Ensure that secret keys remain protected even if hardware falls into unauthorized hands, safeguarding data against tampering and cloning.

Flexible Cryptography (Hash, MAC, KDF)

Choose from configurable cryptographic primitives, such as SHA-2 and NIST-approved lightweight algorithms like Ascon, tailored to your performance and security requirements.

Maintain cryptographic agility to ensure future-proof security as threats evolve and standards advance.

Hardware & Firmware Integration Simplicity

QRoot Lite™ integrates easily via standard industry interfaces (APB, AXI, SPI, UART) and provides a clean, intuitive firmware API compatible with the MARS command set.

Simplify the integration process, accelerating your development cycle, and freeing up your engineers for value-added innovation.

Trusted Sensor Readings (TSRs)

Use built-in Trusted Sensor Registers (TSRs) to verify sensor data integrity, ensuring critical sensor readings cannot be tampered with.

Establish trust in your IoT devices’ sensor data, enabling reliable decision-making and reducing vulnerability to cyberattacks and sensor spoofing.

Supply Chain & Device Provenance Security

Authenticate the integrity and authenticity of your devices throughout their lifecycle and across the supply chain using verifiable attestation and secure identity features.

Prevent device counterfeiting, unauthorized manufacturing, and supply chain infiltration, safeguarding brand reputation and customer trust.

IoT devices

Integration & Footprint

Estimated ~25k gates, optimized for low-area MCUs

Delivered as soft IP for rapid and flexible integration

No special processor modes or privilege levels required

IoT devices

Interfaces & Compatibility

Memory-mapped interfaces: APB, AXI, AHB-lite

Serial interfaces: SPI, UART

Firmware API compliant with TCG MARS command set (CBOR serialized)

IoT devices

Cryptographic Standards

Supports SHA-2, Ascon, and NIST – Hash/MAC/KDF

Compliant with TCG MARS 1.0 specification

Future-proof, cryptographically agile implementation

IoT devices

Operating Conditions

Ultra-low power optimized

Robust across typical IoT operating environments

Suitable for constrained embedded applications

Embed Security into Your Devices with Q-Root Lite™

QRoot Lite™ delivers trusted, standards-based security optimized for embedded MCUs and IoT products. Easily implement secure boot, attestation, and sealed storage in your designs without the complexity or overhead.

Talk to Crypto Quantique experts today to learn more or start your evaluation.

Download Silicon IP Products Brochure Contact sales