Modular Multiplication without Carry Propagation (Algorithm Description)

Oleg Mazonka

DOI: https://doi.org/10.48550/arXiv.2207.14401

2022-07-27

Data Structures and Algorithms

Abstract:This paper describes a sufficiently simple modular multiplication algorithm, which uses only carry-save addition with bit inspection Boolean logic and without number comparison or carry propagation.

What problem does this paper attempt to address?

Unbalanced Exponent Modular Reduction over Binary Field and Its Implementation

Haibin Shen,Yier Jin,Rongquan You

DOI: https://doi.org/10.1109/ICICIC.2006.180

2006-01-01

Abstract:Modular reduction is the basic operation of cryptographic systems. The Barrett's algorithm and Montgomery's algorithm are widely used nowadays and they are both based on pre-computation. In the field of elliptic curve cryptosystem (ECC) over GF(2m), the reduction polynomials recommended by SEC have few items and the degree of second item is much less than that of the first one. Making use of this characteristic, the paper presents a new method to accelerate modular reduction without pre-computation which speeds up modular reduction by 10-30 times over GF(2m) and speeds up ECC point multiplication by 40%-50%. This algorithm has been implemented in a high-speed public-key cipher accelerator
Research of Fast Modular Multiplier for a Class of Finite Fields

Yi’er Jin,Haibin Shen,Huafeng Chen,Xiaolang Yan

DOI: https://doi.org/10.1007/s11767-006-0257-4

2008-01-01

Abstract:A new structure of bit-parallel Polynomial Basis (PB) multiplier is proposed, which is based on a fast modular reduction method. The method was recommended by the National Institute of Standards and Technology (NIST). It takes advantage of the characteristics of irreducible polynomial, i.e., the degree of the second item of irreducible polynomial is far less than the degree of the polynomial in the finite fields GF(2 m ). Deductions are made for a class of finite field in which trinomials are chosen as irreducible polynomials. Let the trinomial be x m + x h +1, where 1 ≤ k ≤ [m/1]. The proposed structure has shorter critical path than the best known one up to date, while the space requirement keeps the same. The structure is practical, especially in real time cryptographic applications.
Fast modular multiplication with carry save adder

Shuguo Li,Runde Zhou,Jianhua Feng,Honghua Zhou

DOI: https://doi.org/10.1109/ICASIC.2001.982575

2001-01-01

Abstract:An implementation algorithm for modular multiplication is proposed based on the Koc's sign estimation technique. The main computation for the algorithm is divided into two parallel parts, i.e. computing 2T mod N and computing P=P+ajT (mod N). Since the two parts use the sign estimation technique, the n-bit addition carry chain can be reduced to 4-bit addition. This makes the circuit clock frequency high. One n-bit modular multiplication is completed every n+1 clock cycles. For n-bit exponent and n-bit modulus, the time and hardware cost are 1.5n(n+1) clock cycles and 20n gates count with CSA technique, respectively.
Optical Modified Signed-Digit Addition Module Based on Boolean Polarization-Encoded Logic Algebra

B Wang,FH Yu,X Liu,PF Gu,JF Tang

DOI: https://doi.org/10.1117/1.600983

IF: 1.3

1996-01-01

Optical Engineering

Abstract:The modified signed-digit (MSD) number system satisfies the requirements of totally parallel addition using identical units and enables the addition of any two numbers in three sucessive steps. We show a simple and compact design of the parallel optical addition module based on MSD number representation using Boolean polarization-encoded logic algebra (BPLA). The four transforms of MSD addition are ex- pressed mathematically and the realization of the transform module us- ing liquid crystal devices (LCDs) are also given. © 1996 Society of Photo- Optical Instrumentation Engineers.
Low-Latency Scalable Modular Multiplier Without Montgomery Algorithm

Tao Wu,Shuguo Li,Litian Liu

DOI: https://doi.org/10.1109/iccsnt.2012.6525895

2012-01-01

Abstract:Due to complex hardware architecture and heavy computation, it is difficult to perform modular multiplications over large integers. In this paper, we propose a low-latency scalable modular multiplier for multi-precision modular multiplications. Unlike popular scalable architectures by Montgomery algorithm, the classic modular multiplication A · B mod M is directly implemented here. Low latency can be obtained by deferring the uses of most significant bits during the interleaving modular multiplications. Also, the critical path of processing elements is greatly reduced by carry-save additions. While the scalable modular multiplier obtains comparable performance with optimal scalable Montgomery modular multiplier, its area overhead increases since more registers and selection logics are employed. The proposed modular multiplier is convenient for variant operands and nonsuccessive modular multiplications, where it is more energy-efficient than popular scalable Montgomery modular multipliers.
A Modular Multiplier Implemented with Truncated Multiplication

Jinnan Ding,Shuguo Li

DOI: https://doi.org/10.1109/tcsii.2017.2771239

2018-01-01

Abstract:In this brief, we propose a modular multiplication algorithm with four truncated multiplications to reduce the critical path. According to our algorithm, a high-speed 3-stage modular multiplier is constructed. Moreover, synthesized with TSMC 90 nm, our design can perform a 256-bit modular multiplication for every clock period of 3.58 ns with circuit scale of approximately 629K equivalent gates. Further, by utilizing the modular multiplier, an elliptic curves cryptography processor is constructed, and it can perform a scalar multiplication in 19.4 $\mu \text{s}$ , which is one of the fastest to date in published literatures.
Modular Multiplier by Folding Barrett Modular Reduction

Tao Wu,Shu-Guo Li,Li-Lian Liu

DOI: https://doi.org/10.1109/icsict.2012.6467863

2012-01-01

Abstract:Modular multipliers of medium or small sizes can be implemented by Barrett modular reduction algorithm. In this work, based on the folded Barrett modular reduction algorithm, we propose a two-stage pipelined modular multiplier for residue arithmetic. In terms of Time×Area, the proposed architecture is more efficient than the modular multiplier by present Barrett modular reduction algorithm.
A Two-Stage Pipelined Architecture for Parallel Modular Exponentiation

Tao Wu,Shuguo Li,Litian Liu

DOI: https://doi.org/10.1109/icist.2012.6221640

2012-01-01

Abstract:In 1998, Koç and Hung proposed a modular multiplication algorithm with carry save additions, in which a sign-detection method in carry save logic is utilized. In this work, the carry save additions in their algorithm are divided into two pipelined stages, so that Montgomery ladder can be used to interleave two nearby modular multiplications. Efficient full modular exponentiation can be performed in such an architecture.
A Novel Method of Modular Multiplication Based on Karatsuba-like Multiplication

Zhen Gu,Shuguo Li

DOI: https://doi.org/10.1109/arith48897.2020.00014

2020-01-01

Abstract:In this paper, we propose a novel method of modular multiplication which embeds the modular reduction in the evaluation and interpolation parts of the Karatsuba-like multiplication. Before, the modular reduction can only be performed independently between multiplication. However, applying our method, the interpolation of the previous multiplication, modular reduction and evaluation of the next multiplication are merged as a whole step, which leads to the simplification of computations and improvement of parallelism. This method can be applied to the modular multiplication with simple moduli like NIST primes, and for general moduli, we can apply this method by using Montgomery modular multiplication instead.
Modular Multiplication Algorithm with Modulus Expanded to Maximum of Integer

SHAO Rong

DOI: https://doi.org/10.3724/sp.j.1087.2012.02470

2012-01-01

Journal of Computer Applications

Abstract:The modular multiplication with the modulus greater than the value of half bits of the integer would result in overflow,and the high precision arithmetic operations have to be used.To avoid the use of high precision arithmetic operations,a modular multiplication algorithm including reduction by congruence was proposed.By decomposing the operands to double-digit numbers and reducing the product of higher digit by congruence,operation overflow was avoided.The experimental results show that the modular multiplication based on 64 digit integers can use the modulus of up to 62 digit.
An Implementation of Montgomery Modular Multiplier Based on KO-3 Multiplication

Shiqi Zhang,Shuguo Li

DOI: https://doi.org/10.1109/cisce55963.2022.9851149

2022-01-01

Abstract:In the public-key cryptographic algorithms like RSA and ECC algorithms, the modular multiplier is the basic and frequently used operation. The core of the modular multiplier is the large integer multiplication. In this paper, we firstly propose a design of multicycle 258-bit KO-3 multiplication based on deduced Karatsuba-Ofman algorithm and further apply this multiplication in the 256-bit pipeline Montgomery modular multiplier. The design is implemented with Verilog hardware description language and we get the synthesis report with Synopsys Design Compiler under SMIC 65nm library. Our design runs a Montgomery modular multiplier in 17 clock cycles and the total latency is 37.4ns. The area of the design is 145281 um2 approximately. Compared with other designs under the same library, our design costs less area and power and can balance the delay-area at the same time.
Novel Systolic Implementation of Modular Multiplication for Large Operands

CHEN Hongyi,GAI Weixin

DOI: https://doi.org/10.3321/j.issn:1000-0054.1998.03.003

1998-01-01

Abstract:A novel systolic linear array modular multiplier is presented which ideally performs the parallel modular multiplication based on the algorithm of Montgomery. The total execution time for an n bit modular multiplication is 2n+11 clock cycles. To further increase the throughput the three stage pipeline architecture is adopted inside the processing element, so that every one bit result outputs at one clock cycle when the pipeline is filled. Each pipeline stage only contains the operation of an one bit full adder. Moreover, with the purely nearest neighbor communication, the interconnect delay is also very short. Therefore it can work at a high clock frequency. On the other hand, every processing element is simple, mainly consisting of four full adders and fourteen flip flops. For n bit modular multiplication, the cost of the hardware is 46 n +184 gates. So this novel linear systolic array for modular multiplication is a speed and area optimized system, suitable for the VLSI implementation. It can be used for modular exponentiation which is a kernel operation in many public key cryptosystems such as RSA. With clock frequency of 200MHz by using 0.8μm CMOS technology, the throughput can reach 129kb/s with a single modular multiplier chip.
A Division-Free Toom-Cook Multiplication Based Montgomery Modular Multiplication

Zhen Gu,Shuguo Li

DOI: https://doi.org/10.1109/tcsii.2018.2886962

2018-01-01

Abstract:Toom–Cook multiplication is a theoretically more efficient multiplication algorithm than traditionally used Karatsuba and schoolbook multiplication but is rarely used in practical hardware designs due to its inherent exact divisions, which are time-consuming and difficult for parallel and serial acceleration. This brief proposes a method of division-free Toom–Cook multiplication based Montgomery modular multiplication, which makes it possible for Toom–Cook multiplication to be applied in practical and efficient hardware implementations. We also provide a hardware implementation of modular multipliers of 256 bits and 1024 bits with advantages on area-time-product over previous researches.
A New Systolic Architecture for Modular Division

Gang Chen,Guoqiang Bai,Hongyi Chen

DOI: https://doi.org/10.1109/tc.2007.20

IF: 3.183

2007-01-01

IEEE Transactions on Computers

Abstract:A new systolic architecture for modular division is proposed in this paper. The architecture is based on a new hardware algorithm for modular division that is extended from the plus-minus algorithm for the greatest common divisor computation. Both the area complexity and the time complexity of the new architecture are linear with respect to the operand bit length. Compared to the architecture using a redundant number representation proposed by Kaihara and Takagi, the new architecture allows a doubled throughput due primarily to the greatly reduced critical path delay, while the area is only about 20 percent larger. Moreover, it is shown that, with a small addition to the control logic, the architecture can also be used to perform Montgomery modular multiplication, thereby efficiently realizing a unified modular multiplier/divider
Fast Montgomery Modular Multiplication and Squaring on Embedded Processors.

Yang Li,Jinlin Wang,Xuewen Zeng,Xiaozhou Ye

DOI: https://doi.org/10.1587/transcom.2016ebp3189

2017-01-01

IEICE Transactions on Communications

Abstract:Montgomery modular multiplication is one of the most efficient algorithms for modular multiplication of large integers. On resource-constraint embedded processors, memory-access operations play an important role as arithmetic operations in the modular multiplication. To improve the efficiency of Montgomery modular multiplication on embedded processors, this paper concentrates on reducing the memory-access operations through adding a few working registers. We first revisit previous popular Montgomery modular multiplication algorithms, and then present improved algorithms for Montgomery modular multiplication and squaring for arbitrary prime fields. The algorithms adopt the general ideas of hybrid multiplication algorithm proposed by Gura and lazy doubling algorithm proposed by Lee. By careful optimization and redesign, we propose novel implementations for Montgomery multiplication and squaring called coarsely integrated product and operand hybrid scanning algorithm (CIPOHS) and coarsely integrated lazy doubling algorithm (CILD). Then, we implement the algorithms on general MIPS64 processor and OCTEON CN6645 processor equipped with specific multiply-add instructions. Experiments show that CIPOHS and CILD offer the best performance both on the general MIPS64 and OCTEON CN6645 processors. But the proposed algorithms have obvious advantages for the processors with specific multiply-add instructions such as OCTEON CN6645. When the modulus is 2048 bits, the CIPOHS and CILD outperform the CIOS algorithm by a factor of 47% and 58%, respectively.
Applications to Montgomery Modular Multiplication of Karatsuba Multiplication Without Overlapped Summation

Zhen Gu,Shuguo Li

DOI: https://doi.org/10.1109/edssc.2017.8126447

2017-01-01

Abstract:Karatsuba Multiplication Algorithm is commonly used in modular multiplications of public-key cryptosystems with large key sizes. The overlapped summation in Karatsuba Multiplication is difficult for parallel acceleration in hardware implementations. This paper proposes a method of avoiding the overlapped summation under the circumstances of calculating Montgomery Modular Multiplication. The proposed method has fewer addition rows and better parallelism.
A Low-Latency and Low-Cost Montgomery Modular Multiplier Based on NLP Multiplication

Jinnan Ding,Shuguo Li

DOI: https://doi.org/10.1109/TCSII.2019.2932328

2020-01-01

Abstract:In this brief, a non-least positive form (NLP) based modular multiplication method that combines Karatsuba and schoolbook multiplication is applied in Montgomery modular multiplication, which saves 2 base multiplications compared to Karatsuba-only designs and allows pipeline structure to make most use of the parallelism in large modular multiplications. Based on this method, 256-bit and 512-bit modular multipliers are constructed with 3-way and 4-way NLP multipliers on FPGA platform. Implemented on Virtex-6, the 256-bit design can perform a modular multiplication in 62.6 ns and only requires 3.5K LUTs and 24 DSPs, which exhibits low-latency and low-cost among previous works.
Carryless Arithmetic Mod 10

David Applegate,Marc LeBrun,N. J. A. Sloane

DOI: https://doi.org/10.48550/arXiv.1008.4633

2011-07-08

Abstract:We investigate what arithmetic would look like if carry digits into other digit position were ignored, so that 9 + 4 = 3, 5 + 5 = 0, 9 X 4 = 6, 5 X 4 = 0, and so on. For example, the primes are now 21, 23, 25, 27, 29, 41, 43, 45, 47, ... .

Number Theory
A Fully-Pipeline Linear Systolic Architecture for Modular Multiplier in Public-Key Crypto-Systems.

Xingjun Wu,Hongyi Chen,Yihe Sun,Weixin Gai

DOI: https://doi.org/10.1023/a:1021110405895

2003-01-01

Abstract:In this paper, a fully-pipeline linear systolic array based on adjusted Montgomery's algorithm is presented to perform modular multiplication at extremely high speed. The processing element ( PE) consists of only 4 full-adders and 14 flip-flops. Three-stage internal pipelined PE results in a very short critical path with only a one-bit full-adder delay. Thus, it can run at a very high cycle rate. The total execution time for an n-bit modular multiplication is 2n + 11 cycles with only (n/2+ 2) PEs. A modular exponentiation based on it takes (3n + 16.5)n cycles in average. Compared with most published VLSI modular multipliers, the hardware complexity is greatly reduced while keeping very high throughput. Therefore it is a good candidate of the arithmetic units used in the many public-key crypto-systems, e.g. RSA, Elliptic Curve and so on, especially for the embedded applications concerning information security.
Minimizing the frequency of carries in modular addition

Francesco Monopoli

DOI: https://doi.org/10.48550/arXiv.1511.02404

2015-11-07

Number Theory

Abstract:When adding integers in base $m$, carries occur. The same happens modulo a generic integer $q$ when the set of digits is a complete set of residues modulo $m$ for some positive integer $m$ dividing $q$. In this paper we prove that asymptotically every digital set in this setting induces carries with frequency at least $1/4$, thus generalizing results of Alon, Diaconis, Shao and Soundararajan.

Modular Multiplication without Carry Propagation (Algorithm Description)

Unbalanced Exponent Modular Reduction over Binary Field and Its Implementation

Research of Fast Modular Multiplier for a Class of Finite Fields

Fast modular multiplication with carry save adder

Optical Modified Signed-Digit Addition Module Based on Boolean Polarization-Encoded Logic Algebra

Low-Latency Scalable Modular Multiplier Without Montgomery Algorithm

A Modular Multiplier Implemented with Truncated Multiplication

Modular Multiplier by Folding Barrett Modular Reduction

A Two-Stage Pipelined Architecture for Parallel Modular Exponentiation

A Novel Method of Modular Multiplication Based on Karatsuba-like Multiplication

Modular Multiplication Algorithm with Modulus Expanded to Maximum of Integer

An Implementation of Montgomery Modular Multiplier Based on KO-3 Multiplication

Novel Systolic Implementation of Modular Multiplication for Large Operands

A Division-Free Toom-Cook Multiplication Based Montgomery Modular Multiplication

A New Systolic Architecture for Modular Division

Fast Montgomery Modular Multiplication and Squaring on Embedded Processors.

Applications to Montgomery Modular Multiplication of Karatsuba Multiplication Without Overlapped Summation

A Low-Latency and Low-Cost Montgomery Modular Multiplier Based on NLP Multiplication

Carryless Arithmetic Mod 10

A Fully-Pipeline Linear Systolic Architecture for Modular Multiplier in Public-Key Crypto-Systems.

Minimizing the frequency of carries in modular addition