SoC Design
What ML-KEM and ML-DSA Cost on a Chip: Gates, SRAM, Cycles and Years
Post-quantum cryptography usually reaches a chip team as a line in a requirements document: add ML-KEM and ML-DSA. The algorithms have been fixed since NIST published FIPS 203 and FIPS 204 in August 2024, so the open questions are now engineering ones. How many gates, how much SRAM, how many cycles, and what happens to a boot ROM that has to outlive the current signing scheme? Published numbers now answer much of this, although they use differ…