AUTKRYPTO

The communication of sensitive or classified information is secured, among other things, by the use of encryption devices that are approved for high-security areas. Since such encryption devices are not offered by Austrian manufacturers, they currently have to be purchased from third countries (such as Germany and Switzerland). This means that devices that may have been developed under the influence of foreign intelligence services are used to protect nationally classified information. Due to the lack of availability of encryption devices “made in Austria,” the question arises as to whether Austria has the necessary technologies and know-how to implement encryption devices with internationally established cryptographic algorithms (such as AES, SHA) and a national chain of trust.

The AUTKRYPTO project addresses this question with regard to three key aspects. First, it is necessary to identify the potential stakeholders (security ministries and authorities) and their requirements. In addition to requirements for secure communication using a post-quantum secure virtual private network (VPN), this raises questions ranging from trusted boot to maintenance options, cryptoagility, expandability with regard to new cryptographic algorithms, and certification. On a technical level, a demonstrator of a secure hardware platform is being developed that will implement a secure post-quantum VPN using an FPGA/software co-design architecture. From an economic perspective, the project is examining whether the development of an Austrian encryption device can currently be implemented with existing technologies and know-how, or whether further investment in IT security companies and education and research funding is necessary in order to build up missing competencies.