Abstract:Thanks to relatively small public and secret keys, the Supersingular Isogeny Key Encapsulation (SIKE) protocol made it into the third evaluation round of the post-quantum standardization project of the National Institute of Standards and Technology (NIST). Even though a large body of research has been devoted to the efficient implementation of SIKE, its latency is still undesirably long for many real-world applications. Most existing implementations of the SIKE protocol use the Montgomery representation for the underlying field arithmetic since the corresponding reduction algorithm is considered the fastest method for performing multiple-precision modular reduction. In this paper, we propose a new data representation for supersingular isogeny-based Elliptic-Curve Cryptography (ECC), of which SIKE is a sub-class. This new representation enables significantly faster implementations of modular reduction than the Montgomery reduction, and also other finite-field arithmetic operations used in ECC can benefit from our data representation. We implemented all arithmetic operations in C using the proposed representation such that they have constant execution time and integrated them to the latest version of the SIKE software library. Using four different parameters sets, we benchmarked our design and the optimized generic implementation on a 2.6 GHz Intel Xeon E5-2690 processor. Our results show that, for the prime of SIKEp751, the proposed reduction algorithm is approximately 2.61 times faster than the currently best implementation of Montgomery reduction, and our representation also enables significantly better timings for other finite-field operations. Due to these improvements, we were able to achieve a speed-up by a factor of about 1.65, 2.03, 1.61, and 1.48 for SIKEp751, SIKEp610, SIKEp503, and SIKEp434, respectively, compared to state-of-the-art generic implementations.

Compressed M-SIDH: an instance of compressed SIDH-like schemes with isogenies of highly composite degrees

Pairing Optimizations for Isogeny‐Based Cryptosystems

Cryptanalysis Of The Compression Function Of Simd

Efficient Software Implementation of the SIKE Protocol Using a New Data Representation

Sharing the Path: A Threshold Scheme from Isogenies and Error Correcting Codes

3- and 5-Isogenies of Supersingular Edwards Curves

SOCI^+: An Enhanced Toolkit for Secure OutsourcedComputation on Integers

SIMD-Aware Homomorphic Compression and Application to Private Database Query

SOCI+: An Enhanced Toolkit for Secure Outsourced Computation on Integers

Paving the Way for SQIsign: Toward Efficient Deployment on 32-bit Embedded Devices

Hidden Stabilizers, the Isogeny To Endomorphism Ring Problem and the Cryptanalysis of pSIDH

Dynamic and scalable secret sharing schemes based on matrix product compressed states

Fast computation of 2-isogenies in dimension 4 and cryptographic applications

One-sided Measurement-Device-Independent Quantum Key Distribution

Concise and Efficient Multi-Identity Fully Homomorphic Encryption Scheme

Efficient Privacy-Preserving Interval Computation and Its Applications

A General SIMD-Based Approach to Accelerating Compression Algorithms.

Key-and-Signature Compact Multi-Signatures for Blockchain: A Compiler with Realizations

Partial-Collision Attack on the Round-Reduced Compression Function of Skein-256.

Optimization of SM2 Algorithm Based on Polynomial Segmentation and Parallel Computing

Towards High-Performance Supersingular Isogeny Cryptographic Hardware Accelerator Design