Exploring Energy Efficient Quantum-resistant Signal Processing Using Array Processors
Exploring Energy Efficient Quantum-resistant Signal Processing Using Array Processors
复制标题
使用阵列处理器探索节能的抗量子信号处理
DOI：
--
复制
发表时间：
2020
期刊：
影响因子：
--
通讯作者：
N. Dutt
中科院分区：
文献类型：
--
作者：
Hamid Nejatollahi;Sina Shahhosseini;Rosario Cammarota;N. Dutt
量子计算机有可能在多项式时间内破解DSA和ECDSA等公钥密码体制，这对安全信号处理构成了迫在眉睫的威胁。带误差环学习格基密码体制是后量子密码体制中最有前途的一类。多项式乘法是RLWE方案中计算量最大的部分，传统的计算方法是卷积和数论变换（NTT）。作为早期的探索，我们设计了两个高吞吐量脉动阵列多项式乘法器，包括基于NTT和基于卷积，并将它们与我们的低成本顺序（非脉动）基于NTT的乘法器进行比较。我们的顺序基于NTT的乘法器实现了3倍的速度比最先进的FGPA实现的多项式乘法器在一个低成本的Artix 7 FPGA上的NewHope-Simple密钥交换机制。当在Zynq UltraScale+ FPGA上合成时，基于NTT的收缩和基于卷积的收缩设计分别实现了我们基于NTT的顺序乘法器的平均1.7倍和7.5倍加速，这可以导致通过CRYSTALS-Dilithium每秒生成超过2倍的签名，这是一种PQC数字签名方案。这些探索有助于设计人员选择正确的PQC实现，使未来的信号处理应用具有量子抗性。
Quantum computers threaten to break public-key cryptography schemes such as DSA and ECDSA in polynomial time, which poses an imminent threat to secure signal processing. Ring learning with error (RLWE) lattice-based cryptography (LBC) is one of the most promising families of post-quantum cryptography (PQC) schemes in terms of efficiency and versatility. Two conventional methods to compute polynomial multiplication, the most compute-intensive routine in the RLWE schemes, are convolutions and Number Theoretic Transform (NTT).In this work, we explore the energy efficiency of polynomial multiplier using systolic architecture for the first time. As an early exploration, we design two high-throughput systolic array polynomial multipliers, including NTT-based and convolution-based, and compare them to our low-cost sequential (non-systolic) NTT-based multiplier. Our sequential NTT-based multiplier achieves 3x speedup over the state-of-the-art FGPA implementation of the polynomial multiplier in the NewHope-Simple key exchange mechanism on a low-cost Artix7 FPGA. When synthesized on a Zynq UltraScale+ FPGA, the NTT-based systolic and convolution-based systolic designs achieve on average 1.7x and 7.5x speedup over our sequential NTT-based multiplier respectively, which can lead to generating over 2x more signatures per second by CRYSTALS-Dilithium, a PQC digital signature scheme. These explorations help designers select the right PQC implementations for making future signal processing applications quantum-resistant.