Hardware Accelerated FrodoKEM on RISC-V

Patrick Karl, Tim Fritzmann, Georg Sigl

Research output: Chapter in Book/Report/Conference proceedingConference contributionpeer-review

1 Scopus citations

Abstract

FrodoKEM is an alternative finalist in the currently running standardization process for post-quantum secure cryptography, initiated by the National Institute of Standards and Technology (NIST). It is based on the well studied plain Learning With Errors (LWE) problem, leading to a high confidence in security. Its conservative design approach, however, makes it less performant when compared to other lattice-based candidates. In this work, we assemble a RISC-V based HW/SW codesign of FrodoKEM to speed up its computation. Our design supports all three parameter sets of the NIST submission. Compared to plain SW implementations on RISC-V, our accelerated design achieves speedup factors of up to 8.13.

Original languageEnglish
Title of host publicationProceedings - 2022 25th International Symposium on Design and Diagnostics of Electronic Circuits and Systems, DDECS 2022
EditorsHana Kubatova, Andreas Steininger, Maksim Jenihhin, Tomasz Garbolino, Petr Fiser, Jan Belohoubek, Jaroslav Borecky
PublisherInstitute of Electrical and Electronics Engineers Inc.
Pages154-159
Number of pages6
ISBN (Electronic)9781665494311
DOIs
StatePublished - 2022
Event25th International Symposium on Design and Diagnostics of Electronic Circuits and Systems, DDECS 2022 - Prague, Czech Republic
Duration: 6 Apr 20228 Apr 2022

Publication series

NameProceedings - 2022 25th International Symposium on Design and Diagnostics of Electronic Circuits and Systems, DDECS 2022

Conference

Conference25th International Symposium on Design and Diagnostics of Electronic Circuits and Systems, DDECS 2022
Country/TerritoryCzech Republic
CityPrague
Period6/04/228/04/22

Keywords

  • FrodoKEM
  • HW/SW Codesign
  • NIST PQC
  • Post-Quantum Cryptography
  • RISC-V

Fingerprint

Dive into the research topics of 'Hardware Accelerated FrodoKEM on RISC-V'. Together they form a unique fingerprint.

Cite this