Exploring hardware implementation feasibility of post-quantum cryptography in embedded systems: Evaluation of NIST-standardized ML-KEM, ML-DSA and SLH-DSA on ESP32-C6

Daniel Patryk Karcz, Marcin Niemiec, Michail Alexandros Kourtis and Tobias Köppl

PLOS ONE, 2026, vol. 21, issue 8, 1-22

Abstract: The transition to post-quantum cryptography (PQC) raises practical concerns regarding the feasibility of standardized algorithms on resource-constrained embedded platforms. While National Institute of Standards and Technology (NIST)-selected PQC schemes are designed for broad applicability, their real-world performance on low-power microcontrollers remains insufficiently characterized. Using a configurable on-device evaluation framework, we assess the lattice-based key encapsulation mechanism (ML-KEM), lattice-based digital signature scheme (ML-DSA), and the hash-based digital signature scheme (SLH-DSA) implementations from the liboqs library across all NIST-standardized parameter sets and security levels. Our measurements focus on execution latency, key and signature material sizes, and dynamic memory behavior under realistic embedded constraints. Experimental results show that all evaluated ML-KEM, ML-DSA, and SLH-DSA parameter sets execute successfully on the ESP32-C6 without external memory support. ML-KEM exhibits stable and predictable memory usage across parameter sets, with execution time increasing proportionally with the security level. ML-DSA key generation and signing operations incur higher computational cost, while verification remains comparatively efficient. Evaluated SLH-DSA parameter sets demonstrate substantially higher execution latency, reflecting the inherent computational cost of hash-based signature schemes on embedded hardware. Overall, our results indicate that selected NIST PQC algorithms are deployable on modern embedded microcontrollers, provided that performance and latency trade-offs are carefully considered. The presented evaluation framework and empirical results provide practical guidance for the design of post-quantum secure embedded systems.

Date: 2026
References: Add references at CitEc
Citations:

Downloads: (external link)
https://journals.plos.org/plosone/article?id=10.1371/journal.pone.0355179 (text/html)
https://journals.plos.org/plosone/article/file?id= ... 55179&type=printable (application/pdf)

Related works:
This item may be available elsewhere in EconPapers: Search for items with the same title.

Export reference: BibTeX RIS (EndNote, ProCite, RefMan) HTML/Text

Persistent link: https://EconPapers.repec.org/RePEc:plo:pone00:0355179

DOI: 10.1371/journal.pone.0355179

Access Statistics for this article

More articles in PLOS ONE from Public Library of Science
Bibliographic data for series maintained by plosone ().