Abstract:The hard mathematical problems that assure the security of our current public-key cryptography (RSA, ECC) are broken if and when a quantum computer appears rendering them ineffective for use in the quantum era. Lattice based cryptography is a novel approach to public key cryptography, of which the mathematical investigation (so far) resists attacks from quantum computers. By choosing a module learning with errors (MLWE) algorithm as the next standard, National Institute of Standard & Technology (NIST) follows this approach. The multiplication of polynomials is the central bottleneck in the computation of lattice based cryptography. Because public key cryptography is mostly used to establish common secret keys, focus is on compact area, power and energy budget and to a lesser extent on throughput or latency. While most other work focuses on optimizing number theoretic transform (NTT) based multiplications, in this paper we highly optimize a Toom-Cook based multiplier. We demonstrate that a memory-efficient striding Toom-Cook with lazy interpolation, results in a highly compact, low power implementation, which on top enables a very regular memory access scheme. To demonstrate the efficiency, we integrate this multiplier into a Saber post-quantum accelerator, one of the four NIST finalists. Algorithmic innovation to reduce active memory, timely clock gating and shift-add multiplier has helped to achieve 38% less power than state-of-the art PQC core, 4x less memory, 36.8% reduction in multiplier energy and 118x reduction in active power with respect to state-of-the-art Saber accelerator (not silicon verified). This accelerator consumes 0.158mm2 active area which is lowest reported till date despite process disadvantages of the state-of-the-art designs.

A Flexible Instruction-based Post-quantum Cryptographic Processor with Modulus Reconfigurable Arithmetic Unit for Module LWR&E

A Flexible and High-Performance Lattice-Based Post-Quantum Crypto Secure Coprocessor

A 334$μ$W 0.158mm$^2$ ASIC for Post-Quantum Key-Encapsulation Mechanism Saber with Low-latency Striding Toom-Cook Multiplication Authors Version

A High-Performance Domain-Specific Processor With Matrix Extension of RISC-V for Module-LWE Applications

Lightweight ASIP Design for Lattice-Based Post-quantum Cryptography Algorithms

Hardware Design of PQC Classic McEliece Finite Field Operations and Encryption Module

RePQC: A 3.4-uJ/Op 48-kOPS Post-Quantum Crypto-Processor for Multiple-Mathematical Problems

LWRpro: an Energy-Efficient Configurable Crypto-Processor for Module-LWR.

Multi-LFSR Architectures for BRLWE-Based Post Quantum Cryptography

A 28nm 48KOPS 3.4µJ/Op Agile Crypto-Processor for Post-Quantum Cryptography on Multi-Mathematical Problems.

Reconfigurable KECCAK Hardware Design for Lattice-based Post-Quantum Cryptography on the RISCV Architecture

16.2 A 28nm 69.4kOPS 4.4μJ/Op Versatile Post-Quantum Crypto-Processor Across Multiple Mathematical Problems.

VPQC: A Domain-Specific Vector Processor for Post-Quantum Cryptography Based on RISC-V Architecture

PQPU: A 4.4- $\mu$ J/Op 69.4-Kops Agile Post-Quantum Crypto-Processor Across Multiple Mathematical Problems

A Low-Cost Configurable Hash Computing Circuit for PQC Algorithm

Sapphire: A Configurable Crypto-Processor for Post-Quantum Lattice-based Protocols

A Programmable Crypto-Processor for National Institute of Standards and Technology Post-Quantum Cryptography Standardization Based on the RISC-V Architecture

A Reconfigurable Coprocessor for Public-Key Cryptography

Highly-Efficient Hardware Architecture for CRYSTALS-Kyber with a Novel Conflict-Free Memory Access Pattern

High-Performance Hardware Implementation of the Saber Key Encapsulation Protocol

Enhancing RISC-V Vector Extension for Efficient Application of Post-Quantum Cryptography