Quick Answer: Vietnam's first homegrown security chip, VGC v1.0, was unveiled by the Government Cipher Committee and Viettel in November 2026. It embeds national cryptographic algorithms directly into hardware, instead of relying on software running on imported chips. It is a 28-nanometre part that Viettel says encrypts and decrypts data about 15 times faster than software-only methods. It is first going into secure USB devices for state and defence agencies.
Vietnam's cipher sector has spent more than 80 years getting good at software encryption. The trouble is that software is only as trustworthy as the chip it runs on, and most of those chips are imported. The VGC v1.0 security chip is the country's attempt to close that gap. Here's what it is, why the hardware-versus-software distinction matters more than the headline speed number, and what to watch next.
Why Software Encryption Isn't Enough on Its Own
Most people assume encryption is encryption. Build a strong algorithm, run it, and the data is safe. The catch is where the keys and the math actually execute. If the processor running the cipher is designed and manufactured outside your control, you're trusting every layer beneath your software.
That's the problem the source material points to. The Government Cipher Committee has long mastered software-based cryptographic algorithms to protect state secrets, but the report notes that growing security risks tied to imported chips made the case for embedding national algorithms directly into hardware.
Think of it as a chain. Software cryptography is one link, and the silicon underneath is another. A secure chain only holds if each link is trusted. Hardware-embedded cryptography moves the trust boundary down into the chip itself, where a hardware root of trust can store keys and run cryptographic operations in a way that software on a general-purpose processor cannot easily tamper with.
Here's the counter-intuitive part. Most coverage of a domestic chip focuses on performance or prestige. The more important question is who controls the design. A chip can be fast and still be untrustworthy if you can't verify what's inside it.
What VGC v1.0 Actually Is
The published specifications are concrete, which is worth noting because many national-tech announcements stay vague.
- Package size: 10 x 10 mm
- Transistor count: 300 million
- Process node: 28-nanometre CMOS
That 28nm node is a mature process, not a leading-edge one. For a security chip, that's arguably a sensible choice. Mature nodes are generally easier to design for reliably and cheaper to produce, and security functions don't need the transistor density that a phone processor does. The trade-off is raw throughput per watt against leading-edge parts, which matters more for AI accelerators than for a dedicated crypto device.
The division of labour is also clear. M2, a unit of the Government Cipher Committee, defines the security requirements, cryptographic algorithms, and evaluation criteria. Viettel's Semiconductor Centre handles chip design and development. That split is common in serious security hardware programmes: the people who decide what "secure" means are separate from the people who draw the circuits. It reduces the risk that the designer grades their own homework.
The 15x Speed Claim: Read It Carefully
Viettel's test results show VGC v1.0 can encrypt and decrypt data about 15 times faster than software-only solutions performing the same tasks. That's a striking number, and it deserves a careful read.
Here's the first thing to understand. The comparison is against software running the same tasks, not against a named commercial hardware security module. The baseline matters. A dedicated crypto engine will almost always beat a general-purpose CPU running cipher code, so a large speedup is expected rather than surprising. Nothing in the source material suggests it is faster than leading international secure elements.
The second point is verification. The figure comes from the developer's test results as reported. The source doesn't mention independent benchmarking. That's not a red flag on its own, but it's the reason you should treat 15x as a directional result until third-party evaluation publishes comparable numbers.
Finally, speed is the least important property of a security chip. The question buyers should ask is whether the chip resists tampering, leaks no keys, and can be certified for its environment. Speed matters once those answers are settled.
How Viettel Protects Designs Before Fabrication
One detail in the report deserves more attention than it got. Engineers introduced measures to protect chip designs before they go to manufacturing, aimed at preventing information leaks and reverse engineering.
This is a real and underappreciated risk. A chip's design files, the netlist and layout, are valuable intellectual property. Between the design house and the fab, those files pass through many hands. Anyone who obtains them can clone the part, or insert a hardware trojan that no later software audit would catch.
Protecting the design at this stage is the right instinct. The mistake many teams make is thinking security starts when the chip is in a device. For hardware, it starts when the first GDSII file leaves the design room. The report doesn't say which specific techniques were used, so I won't guess, but the principle is sound.
Where VGC v1.0 Goes First, and What Comes Next
According to the report, the first batch passed technical testing in the first quarter of 2026 and received certification for socio-economic applications. Deployment is planned in stages:
- Initial deployment: secure USB storage devices for Party, State, and defence agencies.
- Next step: the national digital signature authentication system, which has more than two million digital certificates in circulation.
- Later candidates: financial records, contracts, customer data, and connected devices such as surveillance cameras and environmental sensors.
- Critical infrastructure: electricity, water, oil and gas, and telecommunications.
The order makes sense. Secure USB devices are a contained environment with a well-defined threat model. A national signature system is a higher-stakes target, which is why it comes second. Connected sensors and infrastructure are the hardest, because they operate in uncontrolled physical conditions and have long service lives.
Lieutenant General Vũ Ngọc Thiềm, head of the Government Cipher Committee, was direct about the limits. He said VGC v1.0 is only the starting point and that further testing and certification are required for different operating environments. That's the honest framing. A chip certified for one use case is not automatically certified for a substation or a field-deployed camera.
Here's where most coverage stops, and where it gets interesting. Each new environment raises the bar: temperature range, power fluctuations, physical tamper resistance, and long-term key management. Those are the real tests.
Vietnam's Broader Semiconductor Plan
VGC v1.0 is one piece of a larger effort. The source describes a cooperation agreement between the Government Cipher Committee and Viettel covering four areas:
- Moving VGC v1.0 towards mass production
- Developing multi-core secure semiconductor platforms
- Training specialists in chip design and hardware security
- Testing and evaluating products before deployment
The platform is built on the open RISC-V instruction set architecture. That choice matters. RISC-V is an open standard, so developers can customise processor designs and master the design and verification process without licensing a closed architecture. It's a sensible route for a country building capability from a standing start, though it also means the team must own verification rigorously, since no vendor is vouching for the core.
Viettel's high-tech semiconductor fabrication plant under construction in Hòa Lạc completes the picture. The partnership is expected to strengthen capabilities across the value chain, from design through manufacturing and packaging, and to improve supply chain security. Today, though, VGC v1.0's production route depends on the eventual fab. Until that plant is operating, the chain from design to finished chip is only partly domestic.
Lieutenant General Tào Đức Thắng, Viettel's chairman and general director, put the strategic argument plainly: "Being a latecomer does not mean accepting dependence." Whether that holds will depend on execution across all four cooperation areas, not on a single launch.
| Approach | Where the trust sits | Main limitation |
|---|---|---|
| Software crypto on imported chips | Software and the imported processor | Depends on hardware you can't fully audit |
| Embedded national algorithm (VGC v1.0) | Domestic design, algorithm, and chip | Early-stage, with certification still expanding |
| Established international secure elements | Vendor-controlled, widely certified | Foreign supply chain and export constraints |
Note that the third row describes the general category, not a specific product comparison, because the source doesn't provide one.
Frequently Asked Questions
What is the Vietnam security chip VGC v1.0?
VGC v1.0 is a security chip unveiled by the Government Cipher Committee and Viettel. It is Vietnam's first domestically designed secure semiconductor platform. It is built on a 28nm CMOS process, measures 10 x 10 mm, and contains 300 million transistors. It is initially deployed in secure USB storage for Party, State, and defence agencies.
How does a hardware security chip differ from software encryption?
Software encryption runs on a general-purpose processor, so its security depends on that processor's design and supply chain. A hardware security chip embeds cryptographic functions and key storage in silicon. That moves the trust boundary into the chip, making it harder to tamper with keys from software and easier to certify as a single unit.
Why does embedding encryption in hardware matter for national security?
It reduces dependence on imported chips whose designs you can't fully verify. The source notes that growing risks linked to imported chips drove the decision. Embedding national algorithms in hardware means a country controls both the cipher and the silicon that runs it, which is the core of the digital sovereignty argument.
Is the 15x faster claim for VGC v1.0 independently verified?
The source reports the 15x figure from Viettel's test results, compared against software-only solutions doing the same tasks. It doesn't mention independent benchmarking. Treat it as a developer-reported result until third-party evaluation publishes comparable data.
When will VGC v1.0 be used in critical infrastructure?
The source doesn't give a date. Critical infrastructure such as electricity, water, oil and gas, and telecommunications is listed as a potential application. Lieutenant General Vũ Ngọc Thiềm said further testing and certification are needed for different operating environments before wider deployment.
The Takeaway for Anyone Tracking Vietnam's Chip Push
If you take one thing from this launch, make it this: the important question isn't how fast VGC v1.0 is, it's who can verify what's inside it. Track the next certifications, the move into the national digital signature system, and whether the Hòa Lạc fab comes online. Try reading the Government Cipher Committee's testing and certification updates as they appear, and compare them against the claims in this announcement. Pass this along to anyone in your organisation who's wrestling with supply chain trust for a Vietnam security chip decision, because the answer depends on certification, not headlines.