Hod HaSharon, Israel and Salem, Massachusetts, USA. September 22, 2026 — FortifyIQ has announced that its PQC signature verification library has successfully completed its NIST CAVP validation, confirming alignment with NIST’s FIPS 204 standard for post‑quantum digital signatures. ML‑DSA verify‑only is the NIST‑designated post‑quantum digital signature verification algorithm for secure boot and authenticated firmware updates. FortifyIQ’s technology enables an ultra-small footprint (storage/memory) and best in class performance on constrained MCUs, providing a practical path to post-quantum secure boot for constrained platforms and other devices that need to support post quantum secure boot today.
Post‑quantum migration is becoming an essential requirement across embedded systems, including constrained IoT devices and long‑life infrastructure already deployed in the field.
FortifyIQ’s compact, pure‑software, verify‑only ML‑DSA module is designed to fit inside the ROM of new, cost‑sensitive MCUs/SoCs that have no dedicated crypto hardware, so every unit can ship with PQC secure boot from the factory.
The same implementation can also be integrated into bootloaders and OTA update agents on existing devices, enabling quantum‑safe secure boot and signed firmware updates without hardware changes
This verification-only library complements FortifyIQ’s portfolio of physically hardened (SCA/FIA-resistant) NIST CAVP-validated post-quantum cryptography. It supports PQC secure boot without the overhead of the complete ML-DSA functionality in resource‑constrained embedded environments such as industrial control and SCADA systems, automotive ECUs, and medical devices.
“Our customers have been clear: they need a practical path to post‑quantum secure boot.” said Alex Kesler, CEO of FortifyIQ. “We engineered this product for resource‑constrained embedded systems, where memory budgets are tight and bootloaders must remain small.”
Availability
The ML‑DSA verification library is available now.
About FortifyIQ
FortifyIQ provides high-assurance, security-certifiable cryptographic IP cores and cryptographic software libraries with post-quantum and classical algorithms, all algorithmically hardened against side-channel and fault injection attacks, while maintaining performance, area, and energy efficiency. Our solutions are foundry- and platform-agnostic, for a wide spectrum of devices, from smart cards and IoT devices to AI accelerators and cloud systems.
Backed by a strong portfolio of granted and pending patents, deep cryptographic research, and security proofs, FortifyIQ delivers a quantum-safe portfolio that is certifiable, reliable, and built to meet the security regulatory requirements of today and of the future, and the challenges of real-world applications.
For more information, visit fortifyiq.com or contact: Olivier Debelleiux: info@fortifyiq.com