Abstract:Thanks to relatively small public and secret keys, the Supersingular Isogeny Key Encapsulation (SIKE) protocol made it into the third evaluation round of the post-quantum standardization project of the National Institute of Standards and Technology (NIST). Even though a large body of research has been devoted to the efficient implementation of SIKE, its latency is still undesirably long for many real-world applications. Most existing implementations of the SIKE protocol use the Montgomery representation for the underlying field arithmetic since the corresponding reduction algorithm is considered the fastest method for performing multiple-precision modular reduction. In this paper, we propose a new data representation for supersingular isogeny-based Elliptic-Curve Cryptography (ECC), of which SIKE is a sub-class. This new representation enables significantly faster implementations of modular reduction than the Montgomery reduction, and also other finite-field arithmetic operations used in ECC can benefit from our data representation. We implemented all arithmetic operations in C using the proposed representation such that they have constant execution time and integrated them to the latest version of the SIKE software library. Using four different parameters sets, we benchmarked our design and the optimized generic implementation on a 2.6 GHz Intel Xeon E5-2690 processor. Our results show that, for the prime of SIKEp751, the proposed reduction algorithm is approximately 2.61 times faster than the currently best implementation of Montgomery reduction, and our representation also enables significantly better timings for other finite-field operations. Due to these improvements, we were able to achieve a speed-up by a factor of about 1.65, 2.03, 1.61, and 1.48 for SIKEp751, SIKEp610, SIKEp503, and SIKEp434, respectively, compared to state-of-the-art generic implementations.

Fast Algorithm for Computing Isogenies Between Elliptic Curves

Elliptic curve parallel computation based on hardware dynamic instruction schedule

Revisiting Scalable Modular Multiplication over GF(2/sup M/) for Elliptic Curve Cryptography

Efficient computation of -isogenies

Using the Charlap-Coley-Robbins polynomials for computing isogenies

Using Fricke modular polynomials to compute isogenies

Computing gluing and splitting -isogenies

Isogeny computation on Kummer lines and applications

Fast computation of 2-isogenies in dimension 4 and cryptographic applications

Hard isogeny problems over RSA moduli and groups with infeasible inversion

A New Method of Scalar Multiplication of Elliptic Curve over OEF

Computing Isogenies at Singular Points of the Modular Polynomial

Efficient Point-Counting Algorithms for Superelliptic Curves

Computing Selmer Groups for Elliptic Curves over $\mathbb{Q}(i)$

Explicit isogenies of prime degree over number fields

New isogenies of elliptic curves over number fields

Efficient Software Implementation of the SIKE Protocol Using a New Data Representation

Addition sequence method of scalar multiplication of elliptic curve over OEF

A Selection of the Secure Elliptic Curve and Fast Calculation of Scalar Multiplication

Isomorphism and Generation of Montgomery-Form Elliptic Curves Suitable for Cryptosystems

An Improvement of Fast Scalar Multiplication Algorithm on Elliptic Curves over GF(2 N)