Abstract:Polynomial multiplication stands out as a highly demanding arithmetic process in the development of post-quantum cryptosystems. The importance of the number-theoretic transform (NTT) extends beyond post-quantum cryptosystems, proving valuable in enhancing existing security protocols such as digital signature schemes and hash functions. CRYSTALS-KYBER stands out as the sole public key encryption (PKE) algorithm chosen by the National Institute of Standards and Technology (NIST) in its third round selection, making it highly regarded as a leading post-quantum cryptography (PQC) solution. Due to the potential for errors to significantly disrupt the operation of secure, cryptographically-protected systems, compromising data integrity, and safeguarding against side-channel attacks initiated through faults it is essential to incorporate mitigating error detection schemes. This paper introduces algorithm level fault detection schemes in the NTT multiplication using Negative Wrapped Convolution and the NTT tailored for Kyber Round 3, representing a significant enhancement compared to previous research. We evaluate this through the simulation of a fault model, ensuring that the conducted assessments accurately mirror the obtained results. Consequently, we attain a notably comprehensive coverage of errors. Furthermore, we assess the performance of our efficient error detection scheme for Negative Wrapped Convolution on FPGAs to showcase its implementation and resource requirements. Through implementation of our error detection approach on Xilinx/AMD Zynq Ultrascale+ and Artix-7, we achieve a comparable throughput with just a 9% increase in area and 13% increase in latency compared to the original hardware implementations. Finally, we attained an error detection ratio of nearly 100% for the NTT operation in Kyber Round 3, with a clock cycle overhead of 16% on the Cortex-A72 processor.

Register Transfer Level Concurrent Error Detection in Elliptic Curve Crypto Implementations

Elliptic curve parallel computation based on hardware dynamic instruction schedule

A Secure Scan Method for Crypto Chips

Two-dimensional Parity-based Concurrent Error Detection Method for AES Algorithm Against Differential Fault Attack and Its VLSI Implementation

A Survey on Hardware Implementations of Elliptic Curve Cryptosystems

A Secure Hardware Implementation for Elliptic Curve Digital Signature Algorithm

High-Performance Noninvasive Side-Channel Attack Resistant ECC Coprocessor for GF(2m ).

Protecting Elliptic Curve Cryptography Against Memory Disclosure Attacks

Eliminating Timing Errors Through Collaborative Design to Maximize the Throughput

A Universal, Low-Delay, SEC-DEC-TAEC Code for State Register Protection

Dynamic Error Detection for Dependable Cache Coherency in Multicore Architectures

Towards Error Correction for Computing in Racetrack Memory

Efficient Fault Detection Architectures for Modular Exponentiation Targeting Cryptographic Applications Benchmarked on FPGAs

Efficient Algorithm Level Error Detection for Number-Theoretic Transform used for Kyber Assessed on FPGAs and ARM

Error Detection Architectures for Hardware/Software Co-design Approaches of Number-Theoretic Transform

Research of an Error-tolerant Technique Based on Hybrid of Hardware and Software

Pragmatic Formal Verification of Sequential Error Detection and Correction Codes (ECCs) used in Safety-Critical Design

Design and Implementation of SEU Hard Core Detection Circuit

AnElliptic CurveCryptography Coprocessor Overgf(2m) on Alow-Cost Embedded System

Towards Lightweight Error Detection Schemes for Implementations of MixColumns in Lightweight Cryptography

High-Speed Area-Efficient Hardware Architecture for the Efficient Detection of Faults in a Bit-Parallel Multiplier Utilizing the Polynomial Basis of GF(2m)