Abstract:The hard mathematical problems that assure the security of our current public-key cryptography (RSA, ECC) are broken if and when a quantum computer appears rendering them ineffective for use in the quantum era. Lattice based cryptography is a novel approach to public key cryptography, of which the mathematical investigation (so far) resists attacks from quantum computers. By choosing a module learning with errors (MLWE) algorithm as the next standard, National Institute of Standard & Technology (NIST) follows this approach. The multiplication of polynomials is the central bottleneck in the computation of lattice based cryptography. Because public key cryptography is mostly used to establish common secret keys, focus is on compact area, power and energy budget and to a lesser extent on throughput or latency. While most other work focuses on optimizing number theoretic transform (NTT) based multiplications, in this paper we highly optimize a Toom-Cook based multiplier. We demonstrate that a memory-efficient striding Toom-Cook with lazy interpolation, results in a highly compact, low power implementation, which on top enables a very regular memory access scheme. To demonstrate the efficiency, we integrate this multiplier into a Saber post-quantum accelerator, one of the four NIST finalists. Algorithmic innovation to reduce active memory, timely clock gating and shift-add multiplier has helped to achieve 38% less power than state-of-the art PQC core, 4x less memory, 36.8% reduction in multiplier energy and 118x reduction in active power with respect to state-of-the-art Saber accelerator (not silicon verified). This accelerator consumes 0.158mm2 active area which is lowest reported till date despite process disadvantages of the state-of-the-art designs.

AxMM: Area and Power Efficient Approximate Modular Multiplier for R-LWE Cryptosystem

A Reconfigurable Multiplier for Signed Multiplications with Asymmetric Bit-Widths.

LMM: A Fixed-Point Linear Mapping Based Approximate Multiplier for IoT

Multi-LFSR Architectures for BRLWE-Based Post Quantum Cryptography

Hardware Design of Polynomial Multiplication for Byte-Level Ring-LWE Based Cryptosystem

CNC: A lightweight architecture for Binary Ring-LWE based PQC

A 334$μ$W 0.158mm$^2$ ASIC for Post-Quantum Key-Encapsulation Mechanism Saber with Low-latency Striding Toom-Cook Multiplication Authors Version

A Family of Scalable Polynomial Multiplier Architectures for Lattice-Based Cryptography

High-Speed VLSI Architectures for Modular Polynomial Multiplication via Fast Filtering and Applications to Lattice-Based Cryptography

Efficient Hardware Arithmetic for Inverted Binary Ring-LWE Based Post-Quantum Cryptography

Accelerating Polynomial Modular Multiplication with Crossbar-Based Compute-in-Memory

A High-Performance Domain-Specific Processor With Matrix Extension of RISC-V for Module-LWE Applications

High-speed Polynomial Multiplier Architecture for Ring-Lwe Based Public Key Cryptosystems

A Low Cost High Performance Polynomial Multiplier Design for FPGA Implementation

Towards Efficient Polynomial Multiplication for Lattice-Based Cryptography.

VLSI Design of New Operand Scalable Modular Multiplier

Design of a High-Performance Iterative Barrett Modular Multiplier for Crypto Systems

Low-Latency Scalable Modular Multiplier Without Montgomery Algorithm

Towards Efficient Implementation of Lattice-Based Public-Key Encryption on Modern CPUs

Efficient Polynomial Multiplier Architecture For Ring-Lwe Based Public Key Cryptosystems

A Reconfigurable and Area-Efficient Polynomial Multiplier Using a Novel In-Place Constant-Geometry NTT/INTT and Conflict-Free Memory Mapping Scheme