Conference paper Open Access

Implementing RLWE-based Schemes Using an RSA Co-Processor

Albrecht, Martin R.; Hanser, Christian; Höller, Andrea; Pöppelmann, Thomas; Virdia, Fernando; Wallner, Andreas

Dublin Core Export

<?xml version='1.0' encoding='utf-8'?>
<oai_dc:dc xmlns:dc="" xmlns:oai_dc="" xmlns:xsi="" xsi:schemaLocation="">
  <dc:creator>Albrecht, Martin R.</dc:creator>
  <dc:creator>Hanser, Christian</dc:creator>
  <dc:creator>Höller, Andrea</dc:creator>
  <dc:creator>Pöppelmann, Thomas</dc:creator>
  <dc:creator>Virdia, Fernando</dc:creator>
  <dc:creator>Wallner, Andreas</dc:creator>
  <dc:description>We repurpose existing RSA/ECC co-processors for (ideal) lattice-based cryptography by exploiting the availability of fast long integer multiplication. Such co-processors are deployed in smart cards in passports and identity cards, secured microcontrollers and hardware
security modules (HSM). In particular, we demonstrate an implementation of a variant of the Module-LWE-based Kyber Key Encapsulation Mechanism (KEM) that is tailored for optimal performance on a commercially available smart card chip (SLE 78). To benefit from the RSA/ECC co-processor we use Kronecker substitution in combination with schoolbook and Karatsuba polynomial multiplication. Moreover, we speed-up symmetric operations in our Kyber variant using the AES co-processor to implement a PRNG and a SHA-256 co-processor to realise hash functions. This allows us to execute CCA-secure Kyber768 key generation in 79.6ms, encapsulation in 102.4 ms and decapsulation in 132.7 ms.</dc:description>
  <dc:subject>learning with errors</dc:subject>
  <dc:subject>smart card</dc:subject>
  <dc:title>Implementing RLWE-based Schemes Using an RSA Co-Processor</dc:title>
All versions This version
Views 185185
Downloads 115115
Data volume 90.5 MB90.5 MB
Unique views 175175
Unique downloads 106106


Cite as