CryptoDB

Paper: ISA Extensions for Finite Field Arithmetic: Accelerating Kyber and NewHope on RISC-V

Authors: Erdem Alkim , Fraunhofer SIT, Darmstadt, Germany; Department of Computer Engineering, Ondokuz Mayıs University, Samsun, Turkey Hülya Evkan , Fraunhofer SIT, Darmstadt, Germany Norman Lahr , Fraunhofer SIT, Darmstadt, Germany Ruben Niederhagen , Fraunhofer SIT, Darmstadt, Germany Richard Petri , Fraunhofer SIT, Darmstadt, Germany DOI: 10.13154/tches.v2020.i3.219-242 URL: https://tches.iacr.org/index.php/TCHES/article/view/8589 Search ePrint Search Google We present and evaluate a custom extension to the RISC-V instruction set for finite field arithmetic. The result serves as a very compact approach to software-hardware co-design of PQC implementations in the context of small embedded processors such as smartcards. The extension provides instructions that implement finite field operations with subsequent reduction of the result. As small finite fields are used in various PQC schemes, such instructions can provide a considerable speedup for an otherwise software-based implementation. Furthermore, we create a prototype implementation of the presented instructions for the extendable VexRiscv core, integrate the result into a chip design, and evaluate the design on two different FPGA platforms. The effectiveness of the extension is evaluated by using the instructions to optimize the Kyber and NewHope key-encapsulation schemes. To that end, we also present an optimized software implementation for the standard RISC-V instruction set for the polynomial arithmetic underlying those schemes, which serves as basis for comparison. Both variants are tuned on an assembler level to optimally use the processor pipelines of contemporary RISC-V CPUs. The result shows a speedup for the polynomial arithmetic of up to 85% over the basic software implementation. Using the custom instructions drastically reduces the code and data size of the implementation without introducing runtime-performance penalties at a small cost in circuit size. When used in the selected schemes, the custom instructions can be used to replace a full general purpose multiplier to achieve very compact implementations.
BibTeX
@article{tches-2020-30390,
title={ISA Extensions for Finite Field Arithmetic: Accelerating Kyber and NewHope on RISC-V},
journal={IACR Transactions on Cryptographic Hardware and Embedded Systems},
publisher={Ruhr-Universität Bochum},
volume={2020, Issue 3},
pages={219-242},
url={https://tches.iacr.org/index.php/TCHES/article/view/8589},
doi={10.13154/tches.v2020.i3.219-242},
author={Erdem Alkim and Hülya Evkan and Norman Lahr and Ruben Niederhagen and Richard Petri},
year=2020
}