Skip to content

Back to the catalog

A Security-Aware PQC Benchmarking Framework on Dual-Core Xtensa Silicon
eprint.iacr.orgpaper

A Security-Aware PQC Benchmarking Framework on Dual-Core Xtensa Silicon

This IACR ePrint paper proposes a security-aware benchmarking framework for deploying memory-heavy PQC (ML-KEM, ML-DSA) on the dual-core ESP32-S3 (Xtensa LX7) running FreeRTOS, aimed at smart-grid substation devices bound by the IEC 61850 GOOSE tripping window (≤3ms). It details an asymmetric task-isolation design pinning crypto to Core 1, a heap-auditing methodology for FreeRTOS's heap_4.c allocator tracking key-state allocations across DRAM, and an analytical latency model of CPU stall overhead caused when side-channel masking forces secret polynomial shares to spill to external Octal-SPI PSRAM during non-sequential Cooley-Tukey NTT strides. The work gives embedded engineers a methodology to evaluate PQC side-channel/latency trade-offs before migrating real-time grid infrastructure.

TL;DR A hardware-in-the-loop framework modeling side-channel masking overhead and secret-key memory spillage when running PQC (ML-KEM/ML-DSA) on an ESP32-S3 for real-time smart-grid substations.

Organisations named here

  • Cooley-Tukey NTT
  • IEC 61850
  • ML-DSA
  • ML-KEM

Technologies named here

  • ESP32-S3
  • heap_4.c
  • ML-KEM
  • ML-DSA
  • FreeRTOS
  • goose

Techniques named here

  • Asymmetric task-isolation design
  • Side-channel masking
  • Programmatic heap-auditing methodology