Post-quantum cryptography on a Cortex-M4 with 64 KB RAM is a different problem from PQC on a server. This workshop addresses the specific constraints of city-scale IoT: enlarged key exchanges over LoRaWAN, DTLS 1.3 handshake overhead on NB-IoT, and firmware update authentication for sensors that cannot be physically accessed.
Technical workshop for smart city IoT architects and municipal security teams. Covers PQC migration for constrained sensor networks: ML-KEM key exchange over DTLS 1.3 and CoAP, LoRaWAN and NB-IoT gateway upgrades, FIPS 203/204/205 algorithm selection for Cortex-M4 microcontrollers, and phased rollout strategies aligned with ETSI EN 303 645.
Smart city sensor networks present a PQC migration challenge that enterprise IT does not. Traffic sensors, smart meters, and environmental monitors run on Class 1 and Class 2 constrained devices (RFC 7228) with limited RAM, intermittent connectivity, and battery power budgets measured in years. ML-KEM-768 ciphertexts are roughly 1,088 bytes, which is manageable for a server but significant when multiplied across thousands of LoRaWAN uplinks per hour through a single gateway. The DTLS 1.3 handshake with ML-KEM adds round trips that can exceed NB-IoT uplink windows. SLH-DSA signatures for firmware authentication are 7,856 bytes at the 128-bit security level, requiring fragmented delivery to devices with 64 KB RAM. This workshop works through these constraints with real measurements on Cortex-M4 hardware, maps the ETSI EN 303 645 baseline security requirements to PQC readiness, and builds a phased migration plan that starts at gateways (where compute is less constrained) and sequences endpoint upgrades by data sensitivity and device capability.
Full Day Workshop structure with scheduled breaks. Content is configurable to your organisation's technical level and operational environment.
| # | Session | Topics |
|---|---|---|
| 1 | Quantum Threat Landscape for Constrained IoT Why smart city sensor networks face a distinct cryptographic challenge | |
| 2 | Protocol-Level Cryptographic Exposure Where quantum attacks hit IoT communication stacks |
|
| Break, after 50 min | ||
| 3 | PQC Algorithm Selection for Resource-Constrained Devices FIPS 203/204/205 performance on microcontrollers and embedded platforms |
|
| 4 | Interactive Demonstration PQC handshake simulation on constrained IoT hardware |
|
| Break, after 45 min | ||
| 5 | Migration Planning for City-Scale Sensor Networks Phased rollout across heterogeneous IoT deployments |
|
| 6 | Q&A and Migration Roadmap Review | |
Workshops are designed and delivered by QSECDEF in collaboration with sector specialists. All facilitators have direct experience in both quantum technologies and smart city systems.
Workshop design and delivery
QSECDEF brings world-leading expertise in post-quantum cryptography, quantum computing strategy, and defence-grade security assessment. Our advisory membership spans 600+ organisations and 1,200+ professionals working at the intersection of quantum technologies and critical infrastructure security.
Domain expertise and operational validation
Smart City workshops are co-delivered with sector specialists who bring direct operational experience in smart city organisations. This ensures workshop content is grounded in regulatory, operational, and technical realities specific to the sector.
Sessions are configured around your organisation's technical level, operational environment, and regulatory jurisdiction. Get in touch to discuss requirements and schedule a date.
Contact Us