Instruction-Set Accelerated Implementation of CRYSTALS-Kyber

Configurable Mixed-Radix Number Theoretic Transform Architecture for Lattice-Based Cryptography

“…Bisheh-Niasar et al [12] deployed 2×2 BU array and improved the access pattern to reduce the computational cycle (i.e., 324 CCs). Meanwhile, Bisheh-Niasar et al [13] employed two configurable BUs in parallel, which required a larger number of CCs (i.e., 474) and performed the NTT computation at low clock frequency. However, our fully pipelined NTT design has smallest CC number and outperforms that of [11], [12], and [13] approximately 1.7×, 7×, and 19.7× acceleration, respectively.…”

“…Meanwhile, Bisheh-Niasar et al [13] employed two configurable BUs in parallel, which required a larger number of CCs (i.e., 474) and performed the NTT computation at low clock frequency. However, our fully pipelined NTT design has smallest CC number and outperforms that of [11], [12], and [13] approximately 1.7×, 7×, and 19.7× acceleration, respectively. Thus, the proposed NTT architecture achieves superior performance compared to previous approaches.…”

“…To compare efficacy among NTT architectures, we evaluated ATP metric of the trade-off between area requirement and latency. The fifth through eleventh columns report the [12] has smallest overall ATP value (see [13]).…”

“…The proposed NTT architectures achieve highest throughput among the NTT designs of various parameter sets. Specifically compared with state-of-theart studies, our NTT designs can deliver significant throughput approximately 12× and 8× that of [10] and [12] for n = 1024, 12× that of [10] for n = 512, and 1.7×, 7×, and 19.7× that of [11], [12], and [13] for n = 256, respectively.…”

“…Four BUs have been grouped in a 2×2 BU array together with several optimization strategies to speed-up the NTT computation. Bisheh-Niasar et al have then proposed a reconfigurable resource-efficient NTT architecture supporting the Kyber [13]. In which, multiple BUs have been paralleled based on the memory ping-pong strategy to adopt various Kyber configurations.…”