@ohir @filippo FN-DSA may be a solution for this class of devices. (Or LMS and XMSS, although those two are such a big footgun nobody should be using them, *especially* not for signing — verification is OK.)