Abstract:Lattice-Based Cryptography (LBC) schemes, like CRYSTALS-Kyber and CRYSTALS-Dilithium, have been selected to be standardized in the NIST Post-Quantum Cryptography standard. However, implementing these schemes in resourceconstrained Internet-of-Things (IoT) devices is challenging, considering efficiency, power consumption, area overhead, and flexibility to support various operations and parameter settings. Some existing ASIC designs that prioritize lower power and area can not achieve optimal performance efficiency, which are not practical for battery-powered devices. Custom hardware accelerators in prior co-processor and processor designs have limited applications and flexibility, incurring significant area and power overheads for IoT devices. To address these challenges, this paper presents an efficient lattice-based cryptography processor with customized Single-Instruction-Multiple-Data (SIMD) instruction. First, our proposed SIMD architecture supports efficient parallel execution of various polynomial operations in 256-bit mode and acceleration of Keccak in 320-bit mode, both utilizing efficiently reused resources. Additionally, we introduce data shuffling hardware units to resolve data dependencies within SIMD data. To further enhance performance, we design a dual-issue path for memory accesses and corresponding software design methodologies to reduce the impact of data load/store blocking. Through a hardware/software co-design approach, our proposed processor achieves high efficiency in supporting all operations in lattice-based cryptography schemes. Evaluations of Kyber and Dilithium show our proposed processor achieves over 10x speedup compared with the baseline RISC-V processor and over 5x speedup versus ARM Cortex M4 implementations, making it a promising solution for securing IoT communications and storage. Moreover, Silicon synthesis results show our design can run at 200 MHz with 2.01 mW for Kyber KEM 512 and 2.13 mW for Dilithium 2, which outperforms state-of-the-art works in terms of PPAP (Performance x Power x Area).

A Portable DSP Coprocessor Design Using RISC-V Packed-SIMD Instructions

A near-threshold RISC-V core with DSP extensions for scalable IoT Endpoint Devices

THE DESIGN OF THE PIPELINED RISC-V PROCESSOR WITH THE HARDWARE COPROCESSOR OF DIGITAL SIGNAL PROCESSING

An Agile Instruction Set Extension Method Based on the RISC-V Processor

RISC-V Processor for IOT Applications

Energy-Efficient Dynamic Configurable Datapath Architecture for IoT Devices

An Eight-Core 1.44-GHz RISC-V Vector Processor in 16-nm FinFET

RISC-V Custom Instructions of Elementary Functions for IoT Endpoint Devices

A Reconfigurable Convolutional Neural Network-Accelerated Coprocessor Based on RISC-V Instruction Set

A 28nm 386.5GOPS/W Coarse-Grained DSP Using Configurable Processing Elements for Always-on Computation with FPGA Implementation

Design of a Reconfigurable Coprocessor for Double Precision Floating Point Matrix Algorithms

SPEED: A Scalable RISC-V Vector Processor Enabling Efficient Multi-Precision DNN Inference

A Scalable RISC-V Vector Processor Enabling Efficient Multi-Precision DNN Inference

A 61 Μa/mhz Reconfigurable Application-Specific Processor and System-on-chip for Internet-of-Things

An energy-efficient crypto-extension design for RISC-V

AnnikaCore: RISC-V Architecture Processor Design and Implementation for IoT

A Highly-efficient Lattice-based Post-Quantum Cryptography Processor for IoT Applications.

Design of an SoC Based on 32-Bit RISC-V Processor with Low-Latency Lightweight Cryptographic Cores in FPGA

Better-Than-Worst-Case: A Frequency Adaptation Asynchronous RISC-V Core With Vector Extension

Rapid Prototyping and Evaluation of Programmable Simd Sdr Processors in Lisa

ANDROMEDA: An FPGA Based RISC-V MPSoC Exploration Framework