Fast GF(p) Modular Inversion Algorithm Suitable for VLSI Implementation

T Zhou,XJ Wu,GQ Bai,HY Chen

DOI: https://doi.org/10.1049/el:20020472

2002-01-01

Electronics Letters

Abstract:A new, efficient algorithm for modular inversion in Galois field GF(p) is presented. Very large scale integration (VLSI) implementation of the algorithm is described and the high performance and low silicon penalty is demonstrated.

What problem does this paper attempt to address?

New Algorithm and Fast VLSI Implementation for Modular Inversion in Galois Field GF(p)

T Zhou,XJ Wu,GQ Bai,HY Chen

DOI: https://doi.org/10.1109/icccas.2002.1179061

2002-01-01

Abstract:Modular inversion is one of the kernel arithmetic operations in public key cryptosystems, so the design of low-cost and high-speed hardware implementation is absolutely necessary. In this paper, an improved algorithm for prime fields is presented for hardware facilitation and optimization. The hardware-oriented algorithm involves only ordinary addition/subtraction, and does not need any modular operations or multiplication and division. All of the arithmetic operations in the algorithm can be accomplished by only one adder. These features make it very suitable for fast small VLSI implementation. The VLSI implementation of the algorithm is also given and shows the high performance and low silicon penalty.
Fast VLSI Implementation of Modular Inversion in Galois Field GF(p)

周涛,吴行军,白国强,陈弘毅

DOI: https://doi.org/10.3321/j.issn:1000-0054.2003.01.037

2003-01-01

Abstract:Modular inversion is one of the key arithmetic operations in public key cryptosystems, so low-cost, high-speed hardware implementation is absolutely necessary. This paper presents an algorithm for prime fields for hardware implementation. The algorithm involves only ordinary addition/subtraction and does not need any modular operations, multiplications or divisions. All of the arithmetic operations in the algorithm can be accomplished by only one adder, so it is very suitable for fast very large scale integration (VLSI) implementation. The VLSI implementation of the algorithm is also given with good performance and low silicon penalty.
Modified Modular Inversion Algorithm for Vlsi Implementation

Xiaodong Yan,Shuguo Li

DOI: https://doi.org/10.1109/icasic.2007.4415574

2007-01-01

Abstract:This paper proposes a new, efficient algorithm for modular inversion in Galois field GF(p). This algorithm reduces the number of operations cycles required by 31% when compared with previous algorithms reported in the literature. The 256 bit modular inversion circuit based on the proposed algorithm is implemented in 0.18 mum CMOS standard cell technology. The synthesis result shows a significant speed-up in the same area complexity.
Research of Fast Modular Multiplier for a Class of Finite Fields

Yi’er Jin,Haibin Shen,Huafeng Chen,Xiaolang Yan

DOI: https://doi.org/10.1007/s11767-006-0257-4

2008-01-01

Abstract:A new structure of bit-parallel Polynomial Basis (PB) multiplier is proposed, which is based on a fast modular reduction method. The method was recommended by the National Institute of Standards and Technology (NIST). It takes advantage of the characteristics of irreducible polynomial, i.e., the degree of the second item of irreducible polynomial is far less than the degree of the polynomial in the finite fields GF(2 m ). Deductions are made for a class of finite field in which trinomials are chosen as irreducible polynomials. Let the trinomial be x m + x h +1, where 1 ≤ k ≤ [m/1]. The proposed structure has shorter critical path than the best known one up to date, while the space requirement keeps the same. The structure is practical, especially in real time cryptographic applications.
VLSI Implementation of Inversion Circuits on Finite Field

HAN YONGXIANG,BAI GUOQIANG,CHEN HONGYI

DOI: https://doi.org/10.3969/j.issn.1008-0570.2008.02.001

2008-01-01

Abstract:On , through Extended Euclidean algorithm for binary polynomials, this paper presents a modular inversion circuit on affine coordinates. Base on Fermat's theorem, we designed a modular inversion circuit on standard projective coordinates, which can reuse multiplication and squaring modules. Comparison and analysis on their performances has been made. These circuits hold practical value, and the second one has been embedded in an ECC chip.
Unbalanced Exponent Modular Reduction over Binary Field and Its Implementation

Haibin Shen,Yier Jin,Rongquan You

DOI: https://doi.org/10.1109/ICICIC.2006.180

2006-01-01

Abstract:Modular reduction is the basic operation of cryptographic systems. The Barrett's algorithm and Montgomery's algorithm are widely used nowadays and they are both based on pre-computation. In the field of elliptic curve cryptosystem (ECC) over GF(2m), the reduction polynomials recommended by SEC have few items and the degree of second item is much less than that of the first one. Making use of this characteristic, the paper presents a new method to accelerate modular reduction without pre-computation which speeds up modular reduction by 10-30 times over GF(2m) and speeds up ECC point multiplication by 40%-50%. This algorithm has been implemented in a high-speed public-key cipher accelerator
Fast Inversion in GF(2m) with Polynomial Basis Using Optimal Addition Chains

Lijuan Li,Shuguo Li

DOI: https://doi.org/10.1109/iscas.2017.8050627

2017-01-01

Abstract:Inversion over GF(2(m)) is crucial for cryptographic applications such as elliptic curve cryptography. The commonly used Itoh-Tsujii algorithm (ITA) computes the inversion by an entirely sequential process consisting of multiplications and squarings. In this paper, we first propose a modified ITA algorithm (MITA) for inversion with polynomial basis (PB). The MITA reduces the required clock cycles of ITA inversion by enabling the parallel computation between part of multiplications and squarings. Furthermore, we generalize the MITA to inversion with arbitrary addition chains. Several criteria are proposed to find the optimal addition chains (OACs) leading to the fastest inverters with given hardware resources. Implemented on Xilinx Virtex-4 FPGA, the proposed inversion architecture with a digit-serial multiplier achieves averagely 61% faster speed with 69% less resources than previous designs with normal basis. Using a fully combinational multiplier, the OAC inverters outperform existing PB-based designs by at least 60.9%, 35.1%, 94.9% for m = 163, 233, 283 respectively in terms of area-time product.
A Fast Hardware Implementation of Multiplicative Inversion in GF(2m)

Qiucheng Deng,Xuefei Bai,Li Guo,Yao Wang

DOI: https://doi.org/10.1109/primeasia.2009.5397344

2009-01-01

Abstract:In this paper, a fast hardware implementation of multiplicative inversion in GF(2m) using the optimal normal basis of type II is presented. The approach followed is based on the Sunar-Koc multiplier and the Itoh-Tsujii algorithm. Our design is able to compute multiplicative inversion in GF(2233) using only 26 clock cycles.
A New Method for Implementing Modular Inversion

WANG Long,BAI Guo-qiang

2008-01-01

Abstract:RSA and ECC are two prevailing public-key crypto-systems.In order to demonstrate the feasibility of using an RSA coprocessor to accelerate the ECC algorithm,we presented a new method for implementing modular inversion which is required by the ECC algorithm.The new method is based on the Montgomery multiplication algorithm and the Montgomery inversion algorithm.We proposed a modification to the Montgomery inversion algorithm and improved the RSA coprocessor.With regard to performance and hardware cost,the new method compares favorably with other methods for modular inversion.The new method is 2.2 times and 7.2 times faster than the implementations based on the extended Euclidean algorithm and those based on Fermat's little theorem,respectively.
High-Speed VLSI Architectures for Modular Polynomial Multiplication via Fast Filtering and Applications to Lattice-Based Cryptography

Weihang Tan,Antian Wang,Yingjie Lao,Xinmiao Zhang,Keshab K. Parhi

DOI: https://doi.org/10.1109/TC.2023.3251847

2023-02-24

Abstract:This paper presents a low-latency hardware accelerator for modular polynomial multiplication for lattice-based post-quantum cryptography and homomorphic encryption applications. The proposed novel modular polynomial multiplier exploits the fast finite impulse response (FIR) filter architecture to reduce the computational complexity of the schoolbook modular polynomial multiplication. We also extend this structure to fast $M$-parallel architectures while achieving low-latency, high-speed, and full hardware utilization. We comprehensively evaluate the performance of the proposed architectures under various polynomial settings as well as in the Saber scheme for post-quantum cryptography as a case study. The experimental results show that our proposed modular polynomial multiplier reduces the computation time and area-time product, respectively, compared to the state-of-the-art designs.

Cryptography and Security,Hardware Architecture
A High Performance Parallel VLSI Design of Matrix Inversion.

Kun Wang,Li,Hongbing Pan,Fan Feng,Xiao Yu

DOI: https://doi.org/10.1109/asicon.2015.7517169

2015-01-01

Abstract:This paper proposes a high performance matrix inversion hardware implementation which is divided into three steps, namely, LU decomposition, triangular matrix inversion, matrix multiplication. Our proposed design improve the performance of matrix inversion by parallel computing, and ensure the accuracy and stability through pivoting operation in LU decomposition. Experimental results show the speed- up ratio is almost 3 when the matrix order is 144, and the RMS is less than 10(-4). The design can reach a maximum delay of 0.6ns under the TSMC 40nm craft.
Efficient High-Radix GF(p) Montgomery Modular Multiplication Via Deep Use of Multipliers

Ruoyu Wu,Ming Xu,Yingqing Yang,Guanzhong Tian,Ping Yu,Yangfan Zhao,Lian,Longhua Ma

DOI: https://doi.org/10.1109/tcsii.2022.3197314

2022-01-01

IEEE Transactions on Circuits & Systems II Express Briefs

Abstract:High-radix Montgomery Modular Multiplication (MMM) is flexible and consumes fewer cycles, but turns inefficient especially when it comes to low-bit calculation. In this brief, we propose a high-radix MMM algorithm, called Separated Iterative Digit-Digit Modular Multiplication (S-IDDMM), which accelerates the MMM by taking full advantage of multipliers and adders. The relationship among clock cycles, pipeline of multiplications and number of multipliers for the proposed algorithm is derived and utilized to optimize the overall efficiency jointly. Xilinx Virtex-7 FPGA implementations of S-IDDMM in 256 bits and 512 bits are constructed with radix-32 and radix-64, respectively. Compared with IDDMM design reported elsewhere (Amiet et al., 2016), our calculation time is reduced by more than 2 times with a similar area cost, due to deep use of multipliers and higher frequency.
The VLSI Implementation for Modular Exponentiation of Large Operands

Hongyi Chen,Weixin Gai

DOI: https://doi.org/10.3321/j.issn:0372-2112.1999.02.003

1999-01-01

Tien Tzu Hsueh Pao/Acta Electronica Sinica

Abstract:Many new challenges have been emerging in the information security area such as cryptography, digital signature, identification. Public-key cryptosystem is the only solution. Modular exponentiation of large operand is the kernel operation in many public-key cryptosystems. It is also the bottleneck of the computing efficiency. Based on Montgomery algorithm, a novel systolic array for modular multiplication is presented. Moreover, with the binary method, a 256-bit systolic modular exponentiation processor, THM256 has been successfully designed and fabricated with 0.8 μm CMOS technology. The die area is 17.63 mm2, with 18677 equivalent gates. It can run at 90 MHz or higher frequency under 5 V and less than 1.5 W of power consumption, which means the throughput of 117 kbits/s for modular exponentiation calculation.
Novel Systolic Implementation of Modular Multiplication for Large Operands

CHEN Hongyi,GAI Weixin

DOI: https://doi.org/10.3321/j.issn:1000-0054.1998.03.003

1998-01-01

Abstract:A novel systolic linear array modular multiplier is presented which ideally performs the parallel modular multiplication based on the algorithm of Montgomery. The total execution time for an n bit modular multiplication is 2n+11 clock cycles. To further increase the throughput the three stage pipeline architecture is adopted inside the processing element, so that every one bit result outputs at one clock cycle when the pipeline is filled. Each pipeline stage only contains the operation of an one bit full adder. Moreover, with the purely nearest neighbor communication, the interconnect delay is also very short. Therefore it can work at a high clock frequency. On the other hand, every processing element is simple, mainly consisting of four full adders and fourteen flip flops. For n bit modular multiplication, the cost of the hardware is 46 n +184 gates. So this novel linear systolic array for modular multiplication is a speed and area optimized system, suitable for the VLSI implementation. It can be used for modular exponentiation which is a kernel operation in many public key cryptosystems such as RSA. With clock frequency of 200MHz by using 0.8μm CMOS technology, the throughput can reach 129kb/s with a single modular multiplier chip.
An Improvement in the VLSI Implementation of Montgomery Algorithm

张怡浩,田则,于敦山,盛世敏

DOI: https://doi.org/10.3321/j.issn:0479-8023.2004.01.011

2004-01-01

Abstract:Modular exponentiation of large operands is the kernel operation in many public-key cryptosystems,RSA algorithm for instance.Montgomery algorithm is often used as a solution.In the VLSI implementation of Montgomery algorithm,the speed is the top target. An improvement is proposed with little or even no increase in the hardware area but apparently saving much time.
VLSI Design of a High-Speed RAS Crypto-Processor with Reconfigurable Architecture

Y Fan,XY Zeng,Z Zhang,A Chen,QL Zhang

DOI: https://doi.org/10.1109/isspa.2005.1580257

2006-01-01

Abstract:This paper proposes a novel architecture for highspeed RSA crypto-processor with reconfigurable architecture. Through analysing and comparing between the original algorithms with modified Modular exponentiation and Montgomery multiplication algorithm, a nested pipelined RSA crypto-processor architecture is presented. Based on this architecture, we can easily design a RSA crypto-processor with various speed & key length, it is very flexible to design an encrypt IP core in the SOC platform. As an example, a 1024-bit, 5Mbps RSA cryptoprocessor is implemented. The result shows that the architecture proposed by this paper is practical and efficient.
A High Speed VLSI Implementation of 256-Bit Scalar Point Multiplier for ECC over GF (P)

JianWei Liu,DongXu Cheng,ZhenYu Guan,Ziyu Wang

DOI: https://doi.org/10.1109/iisr.2018.8535680

2018-01-01

Abstract:With the rapid development of cloud computing, e-commerce, authentication among multi-robot systems, the highspeed implementation of Elliptic Curve Cryptography (ECC) is in widespread use. The performance of ECC is decided by the design of scalar point multiplier, which is one of the most time-consuming component. This paper presents a full set of methods to achieve an ultra high-speed scalar point multiplier, its Scalar Point Multiplication (SPM) is optimized comprehensively in terms of speed-first design approach by concurrently implementing the Point-add (PA) and Point-double (PD) algorithms, improving large integer modular inversion algorithm and large integer modular multiplication algorithm. Finally, Montgomery domain operation and Non-Adjacent Form (NAF) encoding theory are applied to enhance the speed of scalar point multiplier. In the VLSI design, a high-speed $\pmb{256\times 256}$ -bit scalar point multiplier is achieved based on SMIC's 65nm process. It can complete single calculation of SPM within 12.5us on average, in other word, 80,000 times of SPM can be computed in one second. Compared to the scalar point multiplier realized by other publications based on VLSI, the reports for circuits synthesis show that our multiplier is optimal in terms of $AT^{2}$ and ultrafast in terms of speed.
VLSI Architecture for Fast Rotators

CHEN Hongyi,ZENG Zhiqiang

DOI: https://doi.org/10.3321/j.issn:1000-0054.1999.01.016

1999-01-01

Abstract:High computing complexity greatly limits application of “rotation arithmetic” in digital signal processing. The methods for the fast realization of Givens rotation are presented. Compared with the traditional Cordic algorithm, they greatly decrease the number of “shift addition” so that it makes “rotation arithmetic” realistic to replace “multiplication addition arithmetic”. The very large scale integration (VLSI) architectures of various fast rotations are also given. Based on them, a four stage pipeline fast rotator is developed to realize the rotation of the arbitrary angle. It can be used as the core for the new VLSI DSP to perform various orthogonal transform by Givens rotation sequences. Its computing complexity can be comparable with the traditional “multipication addition arithmetic”.
Fast Bit Parallel-Shifted Polynomial Basis Multipliers in $Gf(2^{n})$

M. Anwar Hasan

DOI: https://doi.org/10.1109/tcsi.2006.883855

2006-01-01

IEEE Transactions on Circuits and Systems I Fundamental Theory and Applications

Abstract:A new nonpipelined bit-parallel-shifted polynomial basis multiplier for GF(2(n)) is presented. For some irreducible trinomials, the space complexity of the multiplier matches the best results avaliable in the literature, and its gate delay is equal to T-A + [log(2) n]T-X, where T-A and T-X are the delay of one two-input AND and XOR gates, respectively. To the best of our knowledge, this is the first time that the gate delay bound T-A + [log(2) n] T-X is reached. For some irreducible pentanomials, its gate delay is equal to T-A + (1 + [log(2) n])T-X. NIST has recommended five binary fields for the elliptic curve digital signature algorithm applications: GF(2(163)), GF((233)), GF((283)), GF(2(409)), and GF(2(571)), but no irreducible trinomials exist for three degrees, viz., 163, 283 and 571. For the three corresponding binary fields, we show that the gate delay of the proposed multiplier is T-A + (1 + [log(2) n])T-X. This result outperforms the previously known results.
ProgramGalois: A Programmable Generator of Radix-4 Discrete Galois Transformation Architecture for Lattice-based Cryptography

Guangyan Li,Zewen Ye,Donglong Chen,Wangchen Dai,Gaoyu Mao,Kejie Huang,Ray C. C. Cheung

DOI: https://doi.org/10.1145/3689437

IF: 2.837

2024-08-27

ACM Transactions on Reconfigurable Technology and Systems

Abstract:Lattice-based cryptography (LBC) has been established as a prominent research field, with particular attention on post-quantum cryptography (PQC) and fully homomorphic encryption (FHE). As the implementing bottleneck of PQC and FHE, number theoretic transform (NTT) has been extensively studied. However, current works struggled with scalability, hindering their adaptation to various parameters, such as bit-width and polynomial length. In this paper, we proposed a novel Discrete Galois Transformation (DGT) algorithm utilizing the radix-4 variant to achieve a higher level of parallelism to the existing NTT. Furthermore, to implement the efficient radix-4 DGT adapting more LBCs, we proposed a set of scalable building blocks, including a modified Barrett modular multiplier accepting arbitrary modulus with only one integer multiplier, a radix-4 DGT butterfly unit, and a stream permutation network. The proposed modules are implemented on the Xilinx Virtex-7 and U250 FPGA to evaluate resource utilization and performance. Lastly, a design space exploration framework is proposed to generate optimized radix-4 DGT hardware constrained by polynomial and platform parameters. The sensitivity analysis showcases the generated hardware's performance and scalability. The implementation results on the Xilinx Virtex-7 and U250 FPGA show significant performance improvements over the state-of-the-art works, which reached at least 35%, 192%, and 68% area-time product improvements in terms of LUTs, BRAMs, and DSPs, respectively.

computer science, hardware & architecture

Fast GF(p) Modular Inversion Algorithm Suitable for VLSI Implementation

New Algorithm and Fast VLSI Implementation for Modular Inversion in Galois Field GF(p)

Fast VLSI Implementation of Modular Inversion in Galois Field GF(p)

Modified Modular Inversion Algorithm for Vlsi Implementation

Research of Fast Modular Multiplier for a Class of Finite Fields

VLSI Implementation of Inversion Circuits on Finite Field

Unbalanced Exponent Modular Reduction over Binary Field and Its Implementation

Fast Inversion in GF(2m) with Polynomial Basis Using Optimal Addition Chains

A Fast Hardware Implementation of Multiplicative Inversion in GF(2m)

A New Method for Implementing Modular Inversion

High-Speed VLSI Architectures for Modular Polynomial Multiplication via Fast Filtering and Applications to Lattice-Based Cryptography

A High Performance Parallel VLSI Design of Matrix Inversion.

Efficient High-Radix GF(p) Montgomery Modular Multiplication Via Deep Use of Multipliers

The VLSI Implementation for Modular Exponentiation of Large Operands

Novel Systolic Implementation of Modular Multiplication for Large Operands

An Improvement in the VLSI Implementation of Montgomery Algorithm

VLSI Design of a High-Speed RAS Crypto-Processor with Reconfigurable Architecture

A High Speed VLSI Implementation of 256-Bit Scalar Point Multiplier for ECC over GF (P)

VLSI Architecture for Fast Rotators

Fast Bit Parallel-Shifted Polynomial Basis Multipliers in $Gf(2^{n})$

ProgramGalois: A Programmable Generator of Radix-4 Discrete Galois Transformation Architecture for Lattice-based Cryptography