Abstract:Lattice-Based Cryptography (LBC) schemes, like CRYSTALS-Kyber and CRYSTALS-Dilithium, have been selected to be standardized in the NIST Post-Quantum Cryptography standard. However, implementing these schemes in resourceconstrained Internet-of-Things (IoT) devices is challenging, considering efficiency, power consumption, area overhead, and flexibility to support various operations and parameter settings. Some existing ASIC designs that prioritize lower power and area can not achieve optimal performance efficiency, which are not practical for battery-powered devices. Custom hardware accelerators in prior co-processor and processor designs have limited applications and flexibility, incurring significant area and power overheads for IoT devices. To address these challenges, this paper presents an efficient lattice-based cryptography processor with customized Single-Instruction-Multiple-Data (SIMD) instruction. First, our proposed SIMD architecture supports efficient parallel execution of various polynomial operations in 256-bit mode and acceleration of Keccak in 320-bit mode, both utilizing efficiently reused resources. Additionally, we introduce data shuffling hardware units to resolve data dependencies within SIMD data. To further enhance performance, we design a dual-issue path for memory accesses and corresponding software design methodologies to reduce the impact of data load/store blocking. Through a hardware/software co-design approach, our proposed processor achieves high efficiency in supporting all operations in lattice-based cryptography schemes. Evaluations of Kyber and Dilithium show our proposed processor achieves over 10x speedup compared with the baseline RISC-V processor and over 5x speedup versus ARM Cortex M4 implementations, making it a promising solution for securing IoT communications and storage. Moreover, Silicon synthesis results show our design can run at 200 MHz with 2.01 mW for Kyber KEM 512 and 2.13 mW for Dilithium 2, which outperforms state-of-the-art works in terms of PPAP (Performance x Power x Area).

A Flexible and High-Performance Lattice-Based Post-Quantum Crypto Secure Coprocessor

A Flexible Instruction-based Post-quantum Cryptographic Processor with Modulus Reconfigurable Arithmetic Unit for Module LWR&E

Flexible and Efficient Implementation of CRYSTALS-KYBER SIMD RISC-V Coprocessor Based on Customized Vector Instruction-Set Extension

Super K: A Superscalar CRYSTALS KYBER Processor Based on Efficient Arithmetic Array

A 40nm <tex>$\boldsymbol{2.76}\boldsymbol{\mu}\mathbf{J}/\mathbf{Op}$</tex> Energy-Efficient Secure Post-Quantum Crypto-Processor for Crystals-Kyber on Module-LWE

FPGA Accelerated Post-Quantum Cryptography

A 334$μ$W 0.158mm$^2$ ASIC for Post-Quantum Key-Encapsulation Mechanism Saber with Low-latency Striding Toom-Cook Multiplication Authors Version

16.2 A 28nm 69.4kOPS 4.4μJ/Op Versatile Post-Quantum Crypto-Processor Across Multiple Mathematical Problems.

A 40nm $\boldsymbol{2.76}\boldsymbol{\mu}\mathbf{j}/\mathbf{op}$ Energy-Efficient Secure Post-Quantum Crypto-Processor for Crystals-Kyber on Module-LWE

Lightweight ASIP Design for Lattice-Based Post-quantum Cryptography Algorithms

Hybrid Hardware-Software Architecture for Quantum Secure IoT Embedded Systems

A Highly-efficient Lattice-based Post-Quantum Cryptography Processor for IoT Applications.

VPQC: A Domain-Specific Vector Processor for Post-Quantum Cryptography Based on RISC-V Architecture

An Instruction-configurable Post-quantum Cryptographic Processor Towards NTRU

PQPU: A 4.4- $\mu$ J/Op 69.4-Kops Agile Post-Quantum Crypto-Processor Across Multiple Mathematical Problems

A 28nm 48KOPS 3.4µJ/Op Agile Crypto-Processor for Post-Quantum Cryptography on Multi-Mathematical Problems.

Sapphire: A Configurable Crypto-Processor for Post-Quantum Lattice-based Protocols

A 273μw 0.34mm2 Efficient CRYSTALS-KYBER Processor for PQC Towards Edge Computing

RePQC: A 3.4-uJ/Op 48-kOPS Post-Quantum Crypto-Processor for Multiple-Mathematical Problems

A High-Performance Domain-Specific Processor With Matrix Extension of RISC-V for Module-LWE Applications

An Efficient and Configurable Hardware Architecture of Polynomial Modular Operation for CRYSTALS-Kyber and Dilithium