Measurement data and tools: state persistence in stateful hash-based signatures on embedded flash

Measurement data, tools and scripts behind the paper "State Persistence forFirmware-Update Signing on Embedded Flash: Cost, Exposure Bounds, and an ImplementationThat Silently Reuses Keys" Stateful hash-based signature schemes require the one-time-signature index to becommitted to non-volatile storage before each signature is released. This depositcontains the measurements of what that commit costs on embedded storage, afault-injection study of what is lost when the write is batched, and a survey of thestate-authority model of five deployed implementations (wolfCrypt, liboqs, Ciscohash-sigs, the RFC 8391 reference implementation, and Bouncy Castle). Contents: 67 CSV files of raw measurement output; the C and Java programs that producedthem; the shell and Python scripts that run the experiments and rebuild every table inthe paper; and two supplementary tables omitted from the paper for length. Hardware: three Raspberry Pi 4B boards with different microSD cards, one Raspberry Pi 5,and seven USB flash units, all under Linux. Version 2.0 adds SUPPLEMENT.md, which records how far the findings transfer beyond theboards measured here, the cost of the recommended detector (4.6 ns per signature), andan explicit list of what was not measured. It also adds tools/probe8.c.