Fast Strategies for the Implementation of SIKE Round 3 on ARM Cortex-M4
Fast Strategies for the Implementation of SIKE Round 3 on ARM Cortex-M4
复制标题
DOI：
10.1109/tcsi.2021.3096916
复制
发表时间：
2021-10-01
影响因子：
5.1
通讯作者：
Kermani, Mehran Mozaffari
中科院分区：
文献类型：
--
作者：
Anastasova, Mila;Azarderakhsh, Reza;Kermani, Mehran Mozaffari
超奇异等根密钥封装机制（SIKE）是目前唯一基于椭圆曲线及其之间的等根映射的后量子密钥封装协议。尽管协议具有量子安全性，但SIKE需要更多的时钟周期，因此无法提供具有竞争力的定时和能耗结果。然而，提供最小的公钥和密文大小更有吸引力，考虑到通信成本和密钥存储的影响，这可能非常适合资源受限的设备。在这项工作中，我们提出了最快的SIKE实际实现，目标是基于ARMv7-M架构的Cortex-M4平台。我们在STM32F407VG微控制器上进行了测量，用于对时钟周期进行基准测试，并在附着在X-NUCLEO-LPM01A （Power Shield）上的Nucleo-F411RE上进行了测量，用于测量协议的能耗。低级有限域算术运算是决定SIKE算法效率的主要因素。因此，我们主要关注它们的优化，并将它们应用于nist要求的所有安全级别。我们的SIKEp434在NIST安全级别1上的实现比Seo等人（2020）的同类产品快22.97%，其中SIKEp503， SIKEp610和SIKEp751的加速达到21.10%，19.21%和19.08%。最后，我们对能耗进行基准测试，并根据NIST安全级别实现报告高达11.9%的优化。
The Supersingular Isogeny Key Encapsulation mechanism (SIKE) is the only post-quantum key encapsulation protocol based on elliptic curves and isogeny maps between them. Despite the quantum security of the protocol, SIKE requires a greater number of clock cycles and hence does not provide competitive timing and energy consumption results. However, it is more attractive offering the smallest public key as well as ciphertext sizes, which considering the impact of the communication costs and storage of the keys could become a good fit for resource-constrained devices. In this work, we present the fastest practical implementation of SIKE, targeting the platform Cortex-M4 based on the ARMv7-M architecture. We performed our measurements on the STM32F407VG microcontroller for benchmarking the clock cycles and on Nucleo-F411RE attached to X-NUCLEO-LPM01A (Power Shield) for measuring the energy consumption of the protocol. The low-level finite field arithmetic operations play main role in determining the efficiency of SIKE. Therefore, we mainly focus on their optimization and apply them to all NIST-required security levels. Our SIKEp434 implementation for NIST security level 1 is about 22.97% faster than the counterparts appeared in Seo et al. (2020), where for the SIKEp503, SIKEp610 and SIKEp751 the speedup reaches 21.10%, 19.21% and 19.08%. Finally, we benchmark energy consumption and report optimization of up to 11.9% depending on the NIST security level implementation.