Research Article
Kyber on ARM64: Compact Implementations of Kyber on 64-Bit ARM Cortex-A Processors
@INPROCEEDINGS{10.1007/978-3-030-90022-9_23, author={Pakize Sanal and Emrah Karagoz and Hwajeong Seo and Reza Azarderakhsh and Mehran Mozaffari-Kermani}, title={Kyber on ARM64: Compact Implementations of Kyber on 64-Bit ARM Cortex-A Processors}, proceedings={Security and Privacy in Communication Networks. 17th EAI International Conference, SecureComm 2021, Virtual Event, September 6--9, 2021, Proceedings, Part II}, proceedings_a={SECURECOMM PART 2}, year={2021}, month={11}, keywords={Post-quantum cryptography Kyber ARM64 Vectorized implementation}, doi={10.1007/978-3-030-90022-9_23} }- Pakize Sanal
Emrah Karagoz
Hwajeong Seo
Reza Azarderakhsh
Mehran Mozaffari-Kermani
Year: 2021
Kyber on ARM64: Compact Implementations of Kyber on 64-Bit ARM Cortex-A Processors
SECURECOMM PART 2
Springer
DOI: 10.1007/978-3-030-90022-9_23
Abstract
Public-key cryptography based on the lattice problem is efficient and believed to be secure in a post-quantum era. In this paper, we introduce carefully-optimized implementations of Kyber encryption schemes for 64-bit ARM Cortex-A processors. Our research contribution includes optimizations for Number Theoretic Transform (NTT), noise sampling, and AES accelerator based symmetric function implementations. The proposed Kyber512 implementation on ARM64 improved previous works by 1.79(\times ), 1.96(\times ), and 2.44(\times )for key generation, encapsulation, and decapsulation, respectively. Moreover, by using AES accelerator in the proposed Kyber512-90s implementation, it is improved by 8.57(\times ), 6.94(\times ), and 8.26(\times )for key generation, encapsulation, and decapsulation, respectively.
