X-CUBE-PQC is software-only today. Any plans for PQC hardware acceleration in STM32?

[saman]

Hello,

I've looked at X-CUBE-PQC (ML-KEM, ML-DSA, LMS/XMSS verification) and the recently announced ST54M with its PQC accelerator. Two things I couldn't find answers to:

1. X-CUBE-PQC currently targets the STM32H563. Are other STM32 families planned? Is the implementation hardened against side-channel attacks, or is it intended for unprotected use?
2. Does ST plan hardware acceleration for ML-KEM/ML-DSA (NTT, Keccak) in future STM32 parts, like the SHA-3 accelerator in Stellar or the ST54M engine? If so, which families, broadly?

I understand roadmap details may not be public, so "under consideration" or a pointer to the right contact would already help. Thanks!

[Jocelyn RICARD]

Hello ​@saman ,

The X-CUBE-PQC is now “obsolete”. The X-CUBE-CRYPTOLIB V5 is now the official package. It supports PQC algorithms for all STM32.

The main difference is that everything is done by software.

Regarding performance you can have a look to the wiki pages here

As you can see the performances are very close to non PQC algorithms.

Still usage of HW acceleration is under discussion but I have no information about any committed plan so far.

If you want to have more detailed information about PQC on different products, please use OnLine Support (OLS)

Best regards

Jocelyn

[Andrew Neil]

The X-CUBE-PQC is now “obsolete”. The X-CUBE-CRYPTOLIB V5 is now the official package.

So it is:

 

[saman]

Thank you, ​@Jocelyn RICARD, for the clarification and helpful information. Much appreciated!