Opens in a new tab

News & Events

Insyde Software News & Industry Events

Insyde® Software White Paper Examines Firmware in the Post-Quantum Era

CTO Tim Lewis Outlines Six Firmware Technology Areas Affected
by the Transition to Quantum-Resistant Security

FTA 2026 – OAKLAND, CA – October 5, 2026 – Insyde® Software today published Firmware 2030: Six Imperatives for the Post-Quantum Era, a new white paper examining what the transition to post-quantum cryptography (PQC) requires of system firmware in client, server, embedded and datacenter platforms.

Firmware establishes trust before the operating system starts, making it central to authenticating boot software, protecting updates, verifying devices, and securing pre-boot communications. The transition to PQC will require larger signatures and additional storage, affecting flash capacity, root-of-trust silicon, and update architectures.

“For systems shipping in 2030, PQC implementation starts now,” said Tim Lewis, CTO of Insyde Software. “We are working at the forefront of this transition, advancing firmware development to help our customers prepare for evolving security needs, industry standards, and government requirements.”

The white paper examines six firmware technology areas:

  • System silicon and hardware roots of trust
  • UEFI Secure Boot
  • System firmware updates
  • Trusted Platform Modules
  • HTTPS and pre-boot network communications
  • SPDM-based component and device communications

It also explores storage requirements, hybrid cryptographic approaches, and cryptographic agility, giving platform architects, firmware engineers, and security teams a structured view of how PQC affects future firmware designs.

The paper’s release coincides with Insyde Software’s participation today at the International Workshop on Firmware Testing and Analysis (FTA 2026) in Oakland, California. Tim Lewis will be presenting on firmware SBOM generation, firmware-specific security guidelines, and meeting the NSA’s guidance for managing Secure Boot.

Firmware 2030: Six Imperatives for the Post-Quantum Era is available from Insyde Software’s website at www.insyde.com/services/learning-center/whitepapers/firmware-2030-six-imperatives-for-the-post-quantum-era/  ‎

About Insyde Software

Insyde Software (www.insyde.com) is a leading worldwide provider of UEFI firmware, OpenBMC-based systems management solutions and custom engineering services for companies in the mobile, server, desktop, embedded and edge computing industries. The company is publicly held (6231.TWO) and headquartered in Taipei, Taiwan with U.S. headquarters in Westborough, MA. The company’s customers include the world’s leading computing, communications and storage designers and manufacturers.

Insyde is a trademark or registered trademark of Insyde Software in the United States and other countries. Other names and brands may be claimed as property of others.