
Energy Consumption of Post-Quantum Cryptography on Constrained and General-Purpose Architectures
Benchmark of the three NIST post-quantum standards, FIPS 203 (ML-KEM), FIPS 204 (ML-DSA) and FIPS 205 (SLH-DSA), measuring speed and energy for key generation, signing and verification. Tests ran on Raspberry Pi 1, Zero and 4 and on laptop hardware, using OpenSSL 3.5 and a FNIRSI FNB58 USB power meter. ML-KEM and ML-DSA match classical elliptic-curve cryptography, while SLH-DSA signing on 32-bit devices cost up to 243% more energy than on 64-bit.
TL;DR Measures energy and speed of ML-KEM, ML-DSA and SLH-DSA on Raspberry Pi and laptop hardware, finding SLH-DSA signing impractical on 32-bit IoT devices.
Organisations named here
- FIPS 203
- FIPS 204
- ML-DSA
- ML-KEM
- Q-Day
- SLH-DSA
Technologies named here
- Raspberry Pi 1, tested as constrained IoT-class device
- OpenSSL 3.5
- Raspberry Pi Zero, tested as constrained IoT-class device
- FNIRSI FNB58 USB power meter
- Raspberry Pi 4, tested device
- FIPS 203
- FIPS 204
- SLH-DSA signing on 32-bit constrained devices
- openssl
- FIPS 205
- NIST
- FNIRSI FNB58
- Raspberry Pi
Related in Hardware & RF

HAETAE on a Diet: Less Stack, Less Time on Low-End Microcontrollers
geo-tp/ESP32-Bit-Pirate
