Abstract:Number theoretic transform (NTT) is widely utilized to speed up polynomial multiplication, which is the critical computation bottleneck in a lot of cryptographic algorithms like lattice-based post-quantum cryptography (PQC) and homomorphic encryption (HE). One of the tendency for NTT hardware architecture is to support diverse security parameters and meet resource constraints on different computing platforms. Thus flexibility and Area-Time Product (ATP) become two crucial metrics in NTT hardware design. The flexibility of NTT in terms of different vector sizes and moduli can be obtained directly. Whereas the varying strides in memory access of in-place NTT render the design for different radix and number of parallel butterfly units a tough problem. This paper proposes an efficient conflict-free memory mapping scheme that supports the configuration for both multiple parallel butterfly units and arbitrary radix of NTT. Compared to other approaches, this scheme owns broader applicability and facilitates the parallelization of non-radix-2 NTT hardware design. Based on this scheme, we propose a scalable radix-2 and radix-4 NTT multiplication architecture by algorithm-hardware co-design. A dedicated schedule method is leveraged to reduce the number of modular additions/subtractions and modular multiplications in radix-4 butterfly unit by 20% and 33%, respectively. To avoid the bit-reversed cost and save memory footprint in arbitrary radix NTT/INTT, we put forward a general method by rearranging the loop structure and reusing the twiddle factors. The hardware-level optimization is achieved by excavating the symmetric operators in radix-4 butterfly unit, which saves almost 50% hardware resources compared to a straightforward implementation. Through experimental results and theoretical analysis, we point out that the radix-4 NTT with the same number of parallel butterfly units outperforms the radix-2 NTT in terms of area-time performance in the interleaved memory system. This advantage is enlarged when increasing the number of parallel butterfly units. For example, when processing 1024 14-bit points NTT with 8 parallel butterfly units, the ATP of LUT/FF/DSP/BRAM n radix-4 NTT core is approximately 2.2 × /1.2 × /1.1 × /1.9 × less than that of the radix-2 NTT core on a similar FPGA platform.

An Instruction-configurable Post-quantum Cryptographic Processor Towards NTRU

A Compact Full Hardware Implementation of PQC Algorithm NTRU

A Flexible and High-Performance Lattice-Based Post-Quantum Crypto Secure Coprocessor

Scalable and Parallel Optimization of the Number Theoretic Transform Based on FPGA

Lightweight ASIP Design for Lattice-Based Post-quantum Cryptography Algorithms

Hardware Design and Optimization of Polynomial Multiplication for Post-Quantum Cryptography Algorithm Based on NTT

16.2 A 28nm 69.4kOPS 4.4μJ/Op Versatile Post-Quantum Crypto-Processor Across Multiple Mathematical Problems.

VPQC: A Domain-Specific Vector Processor for Post-Quantum Cryptography Based on RISC-V Architecture

RePQC: A 3.4-uJ/Op 48-kOPS Post-Quantum Crypto-Processor for Multiple-Mathematical Problems

A 28nm 48KOPS 3.4µJ/Op Agile Crypto-Processor for Post-Quantum Cryptography on Multi-Mathematical Problems.

Unif-NTT: A Unified Hardware Design of Forward and Inverse NTT for PQC Algorithms

A Number Theoretic Transform Accelerator with Two Parallel Simplified Butterfly Units

PQPU: A 4.4- $\mu$ J/Op 69.4-Kops Agile Post-Quantum Crypto-Processor Across Multiple Mathematical Problems

A High-Performance Domain-Specific Processor With Matrix Extension of RISC-V for Module-LWE Applications

A Programmable Crypto-Processor for National Institute of Standards and Technology Post-Quantum Cryptography Standardization Based on the RISC-V Architecture

Efficient NTTRU Implementation on ARMv8

A Low-Cost Configurable Hash Computing Circuit for PQC Algorithm

Towards Efficient Implementation of Lattice-Based Public-Key Encryption on Modern CPUs

Highly Efficient Architecture of NewHope-NIST on FPGA Using Low-Complexity NTT/INTT.

CFNTT: Scalable Radix-2/4 NTT Multiplication Architecture with an Efficient Conflict-free Memory Mapping Scheme.

Multi-Unit Serial Polynomial Multiplier to Accelerate NTRU-Based Cryptographic Schemes in IoT Embedded Systems