MTG AG

MTG software always complies with cryptographic and operational requirements from NIST and BSI. These are actively monitored and regularly updated. MTG development guidelines include reviews and checks for secure coding constructs. This includes the consideration of OWASP guidelines. The developers are supported by automated code analysis. Penetration tests are part of our release process.

We are already developing solutions in the field of post-quantum cryptography (PQC) to protect our customers’ ERS® systems against future threats from quantum computers. An important aspect for the successful integration of new PQC algorithms is the use of hybrid methods. Hybrid methods combine the advantages from both worlds: On the one hand, the robustness of crypto methods that have been proven millions of times and are in use (e.g., RSA, ECC) and, on the other hand, the combined use of the new, post-quantum secure methods.