Compact and Secure Post-Quantum Signature SW Library for Resource-Constrained Devices
As classical digital signature algorithms face obsolescence in the quantum era, embedded systems require quantum-resistant alternatives that balance performance, code size, RAM size, and power consumption. FortifyIQ’s ML-DSA SW library answers this need with a compact and efficient implementation of the ML-DSA signature scheme, standardized in FIPS 204 based on the CRYSTALS-Dilithium scheme. Designed for secure SoC integration, it supports all security levels of the ML-DSA algorithm and incorporates comprehensive protections against side-channel injection attacks. The IP core is engineered to meet or exceed rigorous certification standards, including FIPS 140-3 and Common Criteria, enabling future-proof authentication for secure embedded applications.
FortifyIQ’s ML-DSA SW library implements the ML-DSA digital signature algorithm, standardized in FIPS 204.
The implementation is algorithmically protected against SCA and FIA with a low overhead in performance and code size compared to a typical SW implementation without protections against SCA and FIA, and with a significantly better performance than implementations with share-based protections. The protection is based on performing the sensitive parts of the calculations in a redundant domain.
The core supports all three ML-DSA security levels (ML-DSA-44, ML-DSA-65, and ML-DSA-87), offering configurable performance and security trade-offs. For efficiency, the low-level protected functions used in the innermost loops are implemented in Assembly.