Firmware that can't be forged or rolled back.
QuantumShield signs each firmware release as a manifest with a hybrid post-quantum signature (Ed25519 + ML-DSA-87 + optional SLH-DSA). A device verifies, before it flashes: the manifest is from the pinned vendor, the binary it received hashes to the signed digest, the version is strictly newer than what's installed, and the model matches. An attacker can't slip in a different binary — or re-flash an old, signed-but-vulnerable image.
Verify before you flash.
- Authentic vendor — the manifest is hybrid-signed by the pinned vendor (whose id binds its keys); forging needs to break a classical AND a lattice (AND hash-based) family at once — given the pinned keys, under the declared trust model.
- Binary binding — the firmware the device actually received must hash to the signed digest. Binding the binary is required by default — no swapped payloads.
- Anti-rollback — only a strictly newer version flashes; an old signed image (even a legitimate past release with a known flaw) is rejected. This is the IoT-critical guard.
- Model binding — firmware for one model won't flash onto another; an optional minimum-version floor enforces staged upgrades.
Sign → ship → verify-before-flash.
- The vendor hybrid-signs a manifest binding the model, version, and the firmware binary's hash.
- The release ships over OTA with the manifest alongside the binary.
- The device hashes what it received, checks the signature against its pinned vendor keys, confirms the version is newer and the model matches — and only then flashes.
QuantumShield is an unaudited reference implementation of post-quantum firmware-manifest signing and anti-rollback. It is "tamper-evident and rollback-resistant under the declared trust model," not "unbreakable" — device-side key custody, a secure boot root of trust, and a durable installed-version store remain the integrator's responsibility. Reference software for evaluation and pilots, not a certified product. Nothing here is an offer of any security, token, or financial instrument.