The post-quantum migration is usually framed as a software problem swap the old algorithm for the new one. For phones and servers, mostly true. For the vast world of constrained devices — smart cards, IoT sensors, embedded controllers — it is also a hardware problem, because the new algorithms cost more to compute. A PQSecure grant is where that collision shows up at the claim level.
US11804968B2, "Area efficient architecture for lattice based key encapsulation and digital signature generation" (issued October 2023, classified under H04L 9/3093, the subclass tied to lattice-based cryptographic mechanisms), claims a hardware architecture that handles both lattice-based key encapsulation and lattice-based digital signatures. The operative phrase is "area efficient" — the claim is about doing this in as little chip area as possible.
Here is why that is a real problem worth a patent. Lattice-based schemes — the basis for the algorithms now being standardized for post-quantum use — involve large keys and heavy polynomial arithmetic compared to the compact elliptic-curve operations they replace. On a constrained device, silicon area is money and power; you cannot simply throw a big general-purpose core at it. The claimed contribution is sharing circuitry between the two operations a device needs — establishing keys (KEM) and signing (signatures) — rather than building separate dedicated hardware for each.
The way this actually works at the design level lattice KEM and lattice signatures rest on overlapping mathematical building blocks, particularly the polynomial arithmetic at their core. A well-designed architecture exploits that overlap, reusing the same arithmetic units across both functions and switching their configuration as needed. The patent claims that reuse as the route to fitting post-quantum crypto into a small footprint.
It is worth flagging the assignee, because it is the kind of detail this column watches PQSecure Technologies is a specialist, not a hyperscaler. The post-quantum patent landscape is not only big-name assignees; focused firms are staking the hardware-implementation positions while others claim the protocols. That division — protocol patents from one set of players, silicon-efficiency patents from another — is itself a feature of how the PQC transition is being carved up.
The usual discipline this is a granted hardware-architecture claim, not a benchmark and not proof of what ships in any specific chip. But it makes concrete a point most post-quantum coverage skips the migration is not free, the new math is heavier, and somebody has to make it fit in the silicon that runs the world's small devices. This grant is one stake in that ground.