Quantum-Resilient Security For Datacenters: A QRNG-RoT FPGA Framework With Live Demonstration

Author: Carlos Abellán, Quside; Munaad, Lattice Semiconductor Collection: 2025 OCP Global Summit - Expo Hall Sessions

Summary

Lattice Semiconductor and Quside (Barcelona-based quantum technology company) jointly present a quantum-resilient trust infrastructure platform combining a quantum random number generator (QRNG) with an FPGA-based root of trust. The platform addresses the 2025-2035 migration to quantum-safe security by integrating Quside's Ruby S1 quantum entropy source chip with Lattice's MachX O5D FPGA, providing locally verified entropy, post-quantum cryptography (PQC) readiness, and crypto-agility through FPGA reprogrammability. The joint demonstration board was announced at OCP 2025 and shown live at Lattice's booth (A23).

The core innovation is runtime-verified quantum entropy generation. Traditional random number generators rely on statistical tests of output streams, which NIST has explicitly rejected as insufficient for cryptographic RNGs. Quside's approach instead verifies the hardware source itself in real time. The Ruby S1 exploits polarization flipping effects in a semiconductor laser cavity -- specifically, spontaneous emission causes a photon to couple randomly into one of two polarization modes, producing a truly random bitstream. The technology uses VCSEL (vertical-cavity surface-emitting laser) pixels, the same devices used in smartphone Face ID systems, making it massively scalable for embedded systems. The chip achieves quantum entropy above 0.9. Combined with Lattice's FPGA, the platform supports CNSA-compliant post-quantum algorithms (LMS, XMSS, ML-KEM) with flexible key accumulation and length management, plus hybrid cryptography combining pre-quantum and post-quantum algorithms.