Quantum-Resistant Security for Software Updates on Low-power Networked Embedded Devices

As the Internet of Things (IoT) continues to expand, long-lived devices will require protection against future quantum adversaries. This paper studies the applicability of quantum-resistant digital signatures to secure software updates based on the IETF SUIT standard.

Key points:

• Benchmarks on Cortex-M, RISC-V, and ESP32 for LMS, Falcon, Dilithium vs. Ed25519 and ECDSA
• Focus on RAM, flash, CPU time, and energy impact
• Practical guidance on selecting PQ signatures for real-world embedded systems
• Analysis of SUIT integration trade-offs in post-quantum settings

This work serves as a realistic roadmap for deploying post-quantum security in embedded firmware update infrastructures.