Skip to main content
Video s3
    Details
    Presenter(s)
    Kan Yao Headshot
    Display Name
    Kan Yao
    Affiliation
    Affiliation
    Nanjing University of Aeronautics and Astronautics
    Country
    Abstract

    CRYSTALS-Kyber is a quantum-resistant and promising lattice-based cryptography (LBC) in the the finalists of the third round post-quantum cryptography (PQC) standardization, which is based on the hardness of Module-Learning with Errors (M-LWE). The variadic parameters make M-LWE to obtain a more flexible security-performance trade-off than Ring-LWE. In this paper, we propose a M-LWE cryptoprocessor targeting CRYSTALS-Kyber with area-time trade-off for the first time. This balanced design includes a fast and low-cost Binomial Sampler and vector-polynomials multiplication structure based on pipelined decimation-in-frequency (DIF) based Number Theoretic Transform (NTT) technique. The M-LWE cryptoprocessor achieve 27,708 encryption operations per second using only 690 slices and 106,716 decryption operations per second using only 571 slices. Our proposed design achieved the lowest area-time product (ATP) with at least 2× performance improvement than the state-of-the-art LBC designs with a similar security level and complexity of polynomials.

    Slides
    • Towards CRYSTALS-Kyber: A M-LWE Cryptoprocessor with Area-Time Trade-Off (application/pdf)