Abstract:Lattice-Based Cryptography (LBC) schemes, like CRYSTALS-Kyber and CRYSTALS-Dilithium, have been selected to be standardized in the NIST Post-Quantum Cryptography standard. However, implementing these schemes in resourceconstrained Internet-of-Things (IoT) devices is challenging, considering efficiency, power consumption, area overhead, and flexibility to support various operations and parameter settings. Some existing ASIC designs that prioritize lower power and area can not achieve optimal performance efficiency, which are not practical for battery-powered devices. Custom hardware accelerators in prior co-processor and processor designs have limited applications and flexibility, incurring significant area and power overheads for IoT devices. To address these challenges, this paper presents an efficient lattice-based cryptography processor with customized Single-Instruction-Multiple-Data (SIMD) instruction. First, our proposed SIMD architecture supports efficient parallel execution of various polynomial operations in 256-bit mode and acceleration of Keccak in 320-bit mode, both utilizing efficiently reused resources. Additionally, we introduce data shuffling hardware units to resolve data dependencies within SIMD data. To further enhance performance, we design a dual-issue path for memory accesses and corresponding software design methodologies to reduce the impact of data load/store blocking. Through a hardware/software co-design approach, our proposed processor achieves high efficiency in supporting all operations in lattice-based cryptography schemes. Evaluations of Kyber and Dilithium show our proposed processor achieves over 10x speedup compared with the baseline RISC-V processor and over 5x speedup versus ARM Cortex M4 implementations, making it a promising solution for securing IoT communications and storage. Moreover, Silicon synthesis results show our design can run at 200 MHz with 2.01 mW for Kyber KEM 512 and 2.13 mW for Dilithium 2, which outperforms state-of-the-art works in terms of PPAP (Performance x Power x Area).

A Compact Implementation of Shadow on an IoT Processor

Real-Time Related-Key Attack on Full-Round Shadow Designed for IoT Nodes

An energy-efficient crypto-extension design for RISC-V

A Highly-efficient Lattice-based Post-Quantum Cryptography Processor for IoT Applications.

Efficient implementations of CRAFT cipher for Internet of Things

Optimized SM4 Hardware Implementations for Low Area Consumption

A Lightweight Nonlinear White-Box SM4 Implementation Applied to Edge IoT Agents.

Recryptor: A Reconfigurable Cryptographic Cortex-M0 Processor with In-Memory and Near-Memory Computing for IoT Security

Implementation of SM4 Algorithm Based on Asynchronous Dual-Rail Low-power Design

Breaking Ground: A New Area Record for Low-Latency First-Order Masked SHA-3

A Hardware-Friendly Shuffling Countermeasure Against Side-Channel Attacks for Kyber

An Energy-Efficient Double Ratchet Cryptographic Processor With Backward Secrecy for IoT Devices

An improved s-box of lightweight block cipher roadrunner for hardware optimization

Split-Radix Based Compact Hardware Architecture for CRYSTALS-Kyber

Exposing Shadow Branches

A low power security-oriented ASIP design

Securing Embedded System from Code Reuse Attacks: A Lightweight Scheme with Hardware Assistance

Research on Performance Optimization of Encryption Algorithms for Network Security Framework

Energy-Efficient Side-Channel Attack Countermeasure with Awareness and Hybrid Configuration Based on It

Sapphire: A Configurable Crypto-Processor for Post-Quantum Lattice-based Protocols

Yet another Improvement of Plantard Arithmetic for Faster Kyber on Low-end 32-bit IoT Devices