Paper 2013/866

Compact Ring-LWE based Cryptoprocessor

Sujoy Sinha Roy, Frederik Vercauteren, Nele Mentens, Donald Donglong Chen, and Ingrid Verbauwhede

Abstract

In this paper we propose an efficient and compact processor for a ring-LWE based encryption scheme. We present three optimizations for the Number Theoretic Transform (NTT) used for polynomial multiplication: we avoid pre-processing in the negative wrapped convolution by merging it with the main algorithm, we reduce the fixed computation cost of the twiddle factors and propose an advanced memory access scheme. These optimization techniques reduce both the cycle and memory requirements. Finally, we also propose an optimization of the ring-LWE encryption system that reduces the number of NTT operations from five to four resulting in a 20\% speed-up. We use these computational optimizations along with several architectural optimizations to design an instruction-set ring-LWE cryptoprocessor. For dimension 256, our processor performs encryption/decryption operations in 20/9 $\mu s$ on a Virtex 6 FPGA and only requires 1349 LUTs, 860 FFs, 1 DSP-MULT and 2 BRAMs. Similarly for dimension 512, the processor takes 48/21 $\mu s$ for performing encryption/decryption operations and only requires 1536 LUTs, 953 FFs, 1 DSP-MULT and 3 BRAMs. Our processors are therefore more than three times smaller than the current state of the art hardware implementations, whilst running somewhat faster.

Metadata
Available format(s)
PDF
Publication info
Preprint. MINOR revision.
Keywords
Lattice-based cryptographyring-LWEPolynomial multiplicationNumber Theoretic TransformHardware implementation
Contact author(s)
sujoy sinharoy @ esat kuleuven be
History
2014-06-18: last of 4 revisions
2013-12-29: received
See all versions
Short URL
https://ia.cr/2013/866
License
Creative Commons Attribution
CC BY

BibTeX

@misc{cryptoeprint:2013/866,
      author = {Sujoy Sinha Roy and Frederik Vercauteren and Nele Mentens and Donald Donglong Chen and Ingrid Verbauwhede},
      title = {Compact Ring-{LWE} based Cryptoprocessor},
      howpublished = {Cryptology {ePrint} Archive, Paper 2013/866},
      year = {2013},
      url = {https://eprint.iacr.org/2013/866}
}
Note: In order to protect the privacy of readers, eprint.iacr.org does not use cookies or embedded third party content.