The open-source silicon project OpenTitan has launched a new hardware security architecture designed for power-constrained devices such as wearables, industrial Internet of Things (IoT) end-nodes and microcontrollers (MCUs).

The new integrated root-of-trust, named Peppermint, manages secure boot processes, firmware updates and cryptographic operations for system-on-chips (SoCs). The architecture is engineered to minimise die area and production costs, remaining in a low-power state until activated by the main processor for specific security tasks.

The design incorporates security-hardened Post-Quantum Cryptography standards. Development of the hardware design is scheduled for the second half of 2026, with software and verification expected to conclude in the first half of 2027.

“Cybersecurity is a huge concern that affects everyone, cutting across country and organisational boundaries,” said Javier Orensanz Martinez, chief executive of lowRISC, the Cambridge, England-based not-for-profit company hosting the OpenTitan project. “Open silicon is quickly becoming the security foundation for the semiconductor industry. With the release of Peppermint, OpenTitan is demonstrating its versatility to deliver a hardware security solution for multiple types of devices and use cases.”

The release expands OpenTitan’s existing portfolio, which includes the Earl Grey discrete root-of-trust used in commercial devices like Chromebooks, and the Darjeeling component designed for server processors.

The open-source approach allows hardware manufacturers to independently verify the security architecture before integrating it into consumer and industrial hardware.

“Security and privacy are foundational at Sesame. We’re asking people to wear our intelligent eyewear all day, and that only works if they trust it,” said Ryan Brown, head of hardware at wearable technology developer Sesame AI. “Building in the open, with lowRISC and the OpenTitan community, means people can validate our approach for themselves.”