Research Article
Compressed SIKE Round 3 on ARM Cortex-M4
@INPROCEEDINGS{10.1007/978-3-030-90022-9_24, author={Mila Anastasova and Mojtaba Bisheh-Niasar and Reza Azarderakhsh and Mehran Mozaffari Kermani}, title={Compressed SIKE Round 3 on ARM Cortex-M4}, proceedings={Security and Privacy in Communication Networks. 17th EAI International Conference, SecureComm 2021, Virtual Event, September 6--9, 2021, Proceedings, Part II}, proceedings_a={SECURECOMM PART 2}, year={2021}, month={11}, keywords={Compressed Supersingular Isogeny Key Encapsulation (SIKE) Post-Quantum Cryptography (PQC) ARM Cortex-M4}, doi={10.1007/978-3-030-90022-9_24} }- Mila Anastasova
Mojtaba Bisheh-Niasar
Reza Azarderakhsh
Mehran Mozaffari Kermani
Year: 2021
Compressed SIKE Round 3 on ARM Cortex-M4
SECURECOMM PART 2
Springer
DOI: 10.1007/978-3-030-90022-9_24
Abstract
In 2016, the National Institute of Standards and Technology (NIST) initiated a standardization process among the post-quantum secure algorithms. Forming part of the alternate group of candidates after Round 2 of the process is the Supersingular Isogeny Key Encapsulation (SIKE) mechanism which attracts with the smallest key sizes offering post-quantum security in scenarios of limited bandwidth and memory resources. Even further reduction of the exchanged information is offered by the compression mechanism, proposed byAzarderakhsh et al., which, however, introduces a significant time overhead and increases the memory requirements of the protocol, making it challenging to integrate it into an embedded system. In this paper, we propose the first compressed SIKE implementation for a resource-constrained device, where we targeted the NIST recommended platform STM32F407VG featuring ARM Cortex-M4 processor. We integrate the isogeny-based implementation strategies described previously in the literature into the compressed version of SIKE. Additionally, we propose a new assembly design for the finite field operations particular for the compressed SIKE, and observe a speedup of up to 16% and up to 25% compared to the last best-reported assembly implementations for p434, p503, and p610.
