Abstract:Lattice-Based Cryptography (LBC) schemes, like CRYSTALS-Kyber and CRYSTALS-Dilithium, have been selected to be standardized in the NIST Post-Quantum Cryptography standard. However, implementing these schemes in resourceconstrained Internet-of-Things (IoT) devices is challenging, considering efficiency, power consumption, area overhead, and flexibility to support various operations and parameter settings. Some existing ASIC designs that prioritize lower power and area can not achieve optimal performance efficiency, which are not practical for battery-powered devices. Custom hardware accelerators in prior co-processor and processor designs have limited applications and flexibility, incurring significant area and power overheads for IoT devices. To address these challenges, this paper presents an efficient lattice-based cryptography processor with customized Single-Instruction-Multiple-Data (SIMD) instruction. First, our proposed SIMD architecture supports efficient parallel execution of various polynomial operations in 256-bit mode and acceleration of Keccak in 320-bit mode, both utilizing efficiently reused resources. Additionally, we introduce data shuffling hardware units to resolve data dependencies within SIMD data. To further enhance performance, we design a dual-issue path for memory accesses and corresponding software design methodologies to reduce the impact of data load/store blocking. Through a hardware/software co-design approach, our proposed processor achieves high efficiency in supporting all operations in lattice-based cryptography schemes. Evaluations of Kyber and Dilithium show our proposed processor achieves over 10x speedup compared with the baseline RISC-V processor and over 5x speedup versus ARM Cortex M4 implementations, making it a promising solution for securing IoT communications and storage. Moreover, Silicon synthesis results show our design can run at 200 MHz with 2.01 mW for Kyber KEM 512 and 2.13 mW for Dilithium 2, which outperforms state-of-the-art works in terms of PPAP (Performance x Power x Area).

Software Implementation and Comparison of ZUC-256, SNOW-V, and AES-256 on RISC-V Platform

A Hardware Implementation of ZUC-256 Stream Cipher

A High-throughput Hardware Implementation of ZUC-256 Stream Cipher

A 55nm 350mhz 328mw Secure RISC-V CPU for Lightweight Systems

Research on Performance Optimization of Encryption Algorithms for Network Security Framework

An energy-efficient crypto-extension design for RISC-V

Research on Implementing Encryption Algorithms on Reconfigurable Arrays

Implementation and integration of Keccak accelerator on RISC-V for CRYSTALS-Kyber

Enhancing RISC-V Vector Extension for Efficient Application of Post-Quantum Cryptography

Xuantie-910: A Commercial Multi-Core 12-Stage Pipeline Out-of-Order 64-Bit High Performance RISC-V Processor with Vector Extension : Industrial Product

The Implementation And Analysis Of Important Symmetric Ciphers On Stream Processor

VPQC: A Domain-Specific Vector Processor for Post-Quantum Cryptography Based on RISC-V Architecture

Finding Practical Distinguishers for ZUC-256 Using Modular Differences.

Constrained Device Performance Benchmarking with the Implementation of Post-Quantum Cryptography

Design and Implementation of a Secure RISC-V Microprocessor

An Innovative FPGA Implementations of the Secure Frequency Hopping Communication System Based on the Improved ZUC Algorithm

New Cryptanalysis of ZUC-256 Initialization Using Modular Differences

A Programmable Crypto-Processor for National Institute of Standards and Technology Post-Quantum Cryptography Standardization Based on the RISC-V Architecture

Multi-Unit Serial Polynomial Multiplier to Accelerate NTRU-Based Cryptographic Schemes in IoT Embedded Systems

A Highly-efficient Lattice-based Post-Quantum Cryptography Processor for IoT Applications.

A High-Performance Domain-Specific Processor With Matrix Extension of RISC-V for Module-LWE Applications