Efficient hardware implementation of finite field arithmetic AB + C for Binary ring-LWE based post-quantum cryptography

Post-quantum cryptography (PQC) has gained significant attention from the community recently as it is proven that the existing public-key cryptosystems are vulnerable to the attacks launched from the well-developed quantum computers. The finite field arithmetic AB + C, where A and C are integer poly...

Descripción completa

Detalles Bibliográficos
Autores: Xie, Jiafeng, He, Pengzhou, Wang, Xiaofang, Imaña Pascual, José Luis
Tipo de recurso: artículo
Fecha de publicación:2022
País:España
Institución:Universidad Complutense de Madrid (UCM)
Repositorio:Docta Complutense
Idioma:inglés
OAI Identifier:oai:docta.ucm.es:20.500.14352/71695
Acceso en línea:https://hdl.handle.net/20.500.14352/71695
Access Level:acceso abierto
Palabra clave:004.8
Multipliers
Parallel
Binary ring-learning-with-errors
Finite field arithmetic
FPGA platform
Hardware design
Post-quantum cryptography
Inteligencia artificial (Informática)
1203.04 Inteligencia Artificial
Descripción
Sumario:Post-quantum cryptography (PQC) has gained significant attention from the community recently as it is proven that the existing public-key cryptosystems are vulnerable to the attacks launched from the well-developed quantum computers. The finite field arithmetic AB + C, where A and C are integer polynomials and B is a binary polynomial, is the key component for the binary Ring-learning-with-errors (BRLWE)-based encryption scheme (a low-complexity PQC suitable for emerging lightweight applications). In this paper, we propose a novel hardware implementation of the finite field arithmetic AB + C through three stages of inter-dependent efforts: (i) a rigorous mathematical formulation process is presented first; (ii) an efficient hardware architecture is then presented with detailed description; (iii) a thorough implementation has also been given along with the comparison. Overall, (i) the proposed basic structure (u = 1) outperforms the existing designs, e.g., it involves 55.9% less area-delay product (ADP) than [13] for n = 512; (ii) the proposed design also offers very efficient performance in time-complexity and can be used in many future applications.