ML-KEM-512 finishes a full key exchange in 35.7 ms using 2.83 mJ on the RP2040 at 133 MHz, 17 times faster than ECDH P-256, with open-source code for all levels of both algorithms.
Implementing lattice-based PQC on resource-constrained processors: A case study for Kyber/Saber’s polynomial multiplication on ARM Cortex-M0/M0+
1 Pith paper cite this work. Polarity classification is still indexing.
1
Pith paper citing it
fields
cs.CR 1years
2026 1verdicts
ACCEPT 1representative citing papers
citing papers explorer
-
Benchmarking NIST-Standardised ML-KEM and ML-DSA on ARM Cortex-M0+: Performance, Memory, and Energy on the RP2040
ML-KEM-512 finishes a full key exchange in 35.7 ms using 2.83 mJ on the RP2040 at 133 MHz, 17 times faster than ECDH P-256, with open-source code for all levels of both algorithms.