Standard lattices in hardware
Additional information
Authors
Howe J.,
Moore C.,
O'Neill M.,
Regazzoni F.,
Güneysu T.,
Beeden K.
Type
Article in conference proceedings
Year
2016
Language
English
Abstract
Lattice-based cryptography has gained credence recently as a replacement for current public-key cryptosystems, due to its quantum-resilience, versatility, and relatively low key sizes. To date, encryption based on the learning with errors (LWE) problem has only been investigated from an ideal lattice standpoint, due to its computation and size efficiencies. However, a thorough investigation of standard lattices in practice has yet to be considered. Standard lattices may be preferred to ideal lattices due to their stronger security assumptions and less restrictive parameter selection process.In this paper, an area-optimised hardware architecture of a standard lattice-based cryptographic scheme is proposed. The design is implemented on a FPGA and it is found that both encryption and decryption fit comfortably on a Spartan-6 FPGA. This is the first hardware architecture for standard lattice-based cryptography reported in the literature to date, and thus is a benchmark for future implementations. Additionally, a revised discrete Gaussian sampler is proposed which is the fastest of its type to date, and also is the first to investigate the cost savings of implementing with λ/2-bits of precision.Performance results are promising compared to the hardware designs of the equivalent ring-LWE scheme, which in addition to providing stronger security proofs; generate 1272 encryptions per second and 4395 decryptions per second.
Conference proceedings
Proceedings of the 53rd Annual Design Automation Conference DAC 2016
Month
June
Publisher
ACM
Series
Proceedings of DAC
Start page number
162
Meeting place
Austin, TX, USA
ISBN
978-1-4503-4236-0
Keywords
encryption, hardware design, lattice-based cryptography, physical attack
