在FPGA上的CRYSTALS-Kyber的管道和无冲突数理论变换加速器
Ayesha Waris1, Arshad Aziz1, Bilal Muhammad Khan1
1National University of Sciences and Technology (NUST), Karachi, Pakistan.
PloS one
|November 11, 2025
概括
本研究介绍了针对Crystals-Kyber的优化FPGA实现,这是一个后量子加密算法. 高效的硬件设计显著提高了性能,并减少了资源使用,以提高对量子威胁的安全性.
科学领域:
- 密码学 密码学 密码学 密码学
- 计算机工程 计算机工程
- 量子计算安全 量子计算安全
背景情况:
- 量子计算机对当前的加密系统构成重大威胁.
- 晶体-Kyber是一个NIST标准化的后量子加密算法,依赖于基于晶格的加密.
- 有效的硬件加速对于Crystals-Kyber的实际部署至关重要.
研究的目的:
- 为了呈现一个高效的现场可编程门阵列 (FPGA) 实现数理论变换 (NTT) 核心的晶体-Kyber.
- 为了优化计算密集的多项式乘法NTT单元以提高性能.
- 加强数据传输的安全性,以防未来的量子计算威胁.
主要方法:
- 开发了一个基于NTT核心的无冲突和管道单路径延迟反.
- 采用了架构优化,如管道和资源共享.
- 集成的算法优化,包括一个没有乘数的蒙哥马利减小算法.
主要成果:
- 与最先进的设计相比,实现了7.8%的硬件资源减少.
- 提高了 49.6% 的时空积分 (ATP).
- 在Xilinx Artix-7和Virtex-7设备上使用Verilog HDL成功实现了设计.
结论:
- 拟议的FPGA实施为CRYSTALS-Kyber提供了显著的效率提升.
- 这种优化的NTT核心对于加速后量子加密硬件至关重要.
- 该设计有助于在量子计算时代确保通信安全.
相关概念视频
Phasor Arithmetics
719
Phasors and their corresponding sinusoids are interrelated, offering unique insights into the behavior of alternating current (AC) circuits. One way to understand this relationship is through the operations of differentiation and integration in both the time and phasor domains.
When the derivative of a sinusoid is taken in the time domain, it transforms into its corresponding phasor multiplied by j-omega (jω) in the phasor domain, where j is the imaginary unit, and ω is the angular...
When the derivative of a sinusoid is taken in the time domain, it transforms into its corresponding phasor multiplied by j-omega (jω) in the phasor domain, where j is the imaginary unit, and ω is the angular...
719
Synthetic Disvision of Polynomials
122
Synthetic division is an efficient algorithmic approach for dividing a polynomial by a linear binomial of the form x - c, where c is a real number. This method is helpful due to its streamlined process, which avoids the more cumbersome steps involved in the traditional long division of polynomials. It simplifies computation and serves as a practical tool for evaluating polynomials and identifying their factors.To perform synthetic division, one begins by listing the coefficients of the...
122
Parallel Processing
612
The brain processes sensory information rapidly due to parallel processing, which involves sending data across multiple neural pathways at the same time. This method allows the brain to manage various sensory qualities, such as shapes, colors, movements, and locations, all concurrently. For instance, when observing a forest landscape, the brain simultaneously processes the movement of leaves, the shapes of trees, the depth between them, and the various shades of green. This enables a quick and...
612
Ampere-Maxwell's Law: Problem-Solving
1.1K
A parallel-plate capacitor with capacitance C, whose plates have area A and separation distance d, is connected to a resistor R and a battery of voltage V. The current starts to flow at t = 0. What is the displacement current between the capacitor plates at time t? From the properties of the capacitor, what is the corresponding real current?
To solve the problem, we can use the equations from the analysis of an RC circuit and Maxwell's version of Ampère's law.
For the first part of the...
To solve the problem, we can use the equations from the analysis of an RC circuit and Maxwell's version of Ampère's law.
For the first part of the...
1.1K
Design Example: Capacitance Multiplier Circuit
1.5K
In integrated circuit technology, a capacitance multiplier is often utilized to produce a larger capacitance value when a small physical capacitance falls short. This is achieved by a circuit that multiplies capacitance values by a factor of up to 1000, such that a 10-pF capacitor can replicate the performance of a 100-nF capacitor.
The circuit illustrated in Figure 1 below incorporates two op-amps, with the first operating as a voltage follower and the second acting as an inverting amplifier.
The circuit illustrated in Figure 1 below incorporates two op-amps, with the first operating as a voltage follower and the second acting as an inverting amplifier.
1.5K
Ampere's Law: Problem-Solving
4.3K
Ampere's law states that for any closed looped path, the line integral of the magnetic field along the path equals the vacuum permeability times the current enclosed in the loop. If the fingers of the right hand curl along the direction of the integration path, the current in the direction of the thumb is considered positive. The current opposite to the thumb direction is considered negative.
Specific steps need to be considered while calculating the symmetric magnetic field distribution...
Specific steps need to be considered while calculating the symmetric magnetic field distribution...
4.3K


