Abstract:The hard mathematical problems that assure the security of our current public-key cryptography (RSA, ECC) are broken if and when a quantum computer appears rendering them ineffective for use in the quantum era. Lattice based cryptography is a novel approach to public key cryptography, of which the mathematical investigation (so far) resists attacks from quantum computers. By choosing a module learning with errors (MLWE) algorithm as the next standard, National Institute of Standard & Technology (NIST) follows this approach. The multiplication of polynomials is the central bottleneck in the computation of lattice based cryptography. Because public key cryptography is mostly used to establish common secret keys, focus is on compact area, power and energy budget and to a lesser extent on throughput or latency. While most other work focuses on optimizing number theoretic transform (NTT) based multiplications, in this paper we highly optimize a Toom-Cook based multiplier. We demonstrate that a memory-efficient striding Toom-Cook with lazy interpolation, results in a highly compact, low power implementation, which on top enables a very regular memory access scheme. To demonstrate the efficiency, we integrate this multiplier into a Saber post-quantum accelerator, one of the four NIST finalists. Algorithmic innovation to reduce active memory, timely clock gating and shift-add multiplier has helped to achieve 38% less power than state-of-the art PQC core, 4x less memory, 36.8% reduction in multiplier energy and 118x reduction in active power with respect to state-of-the-art Saber accelerator (not silicon verified). This accelerator consumes 0.158mm2 active area which is lowest reported till date despite process disadvantages of the state-of-the-art designs.

How to compute a 256-bit elliptic curve private key with only 50 million Toffoli gates

Minimizing CNOT-count in Quantum Circuit of the Extended Shor’s Algorithm for ECDLP

Toffoli gate count optimized space-efficient quantum circuit for binary field multiplication

Shor's discrete logarithm quantum algorithm for elliptic curves

Active volume: An architecture for efficient fault-tolerant quantum computers with limited non-local connections

Performance Analysis of a Repetition Cat Code Architecture: Computing 256-bit Elliptic Curve Logarithm in 9 Hours with 126133 Cat Qubits

The impact of hardware specifications on reaching quantum advantage in the fault tolerant regime

A Highly Efficient ECPM Quantum Circuit for Binary Elliptic Curve Cryptanalysis

A 334$μ$W 0.158mm$^2$ ASIC for Post-Quantum Key-Encapsulation Mechanism Saber with Low-latency Striding Toom-Cook Multiplication Authors Version

Fast Quantum Modular Exponentiation Architecture for Shor's Factorization Algorithm

Efficient quantum circuits for binary elliptic curve arithmetic: reducing T-gate complexity

How to factor 2048 bit RSA integers in 8 hours using 20 million noisy qubits

Distributed Quantum Computing in Silicon

Modular Architectures and Entanglement Schemes for Error-Corrected Distributed Quantum Computation

Faster Quantum Number Factoring via Circuit Synthesis

Fault-tolerant resource estimation using graph-state compilation on a modular superconducting architecture

Codesign of quantum error-correcting codes and modular chiplets in the presence of defects

Quantum Circuit Designs of Point Doubling for Binary Elliptic Curves

Experimental realisation of Shor's quantum factoring algorithm using qubit recycling

New Space-Efficient Quantum Algorithm for Binary Elliptic Curves using the Optimized Division Algorithm

Minimizing resource overhead in fusion-based quantum computation using hybrid spin-photon devices