Core engineering and protocols for TCG TPM 2.0 PQC Profiles.
The Trusted Computing Group TPM 2.0 specification was originally structured around 256-bit to 512-bit classical keys. Upgrading to post-quantum standards requires expanding the algorithm registry (TPM_ALG_ID) to support FIPS 203 ML-KEM and FIPS 204 ML-DSA. QuantumTPM establishes backward-compatible data structures that accommodate larger public keys and ciphertexts without breaking existing firmware parsers.
Every physical TPM contains an Endorsement Key (EK) burned into silicon at manufacturing. QuantumTPM introduces dual-EK architectures where classical ECC and post-quantum ML-DSA endorsement certificates co-exist, enabling hardware-rooted cryptographic identity across hybrid cloud deployments.