Cryptography for next generation TLS: Implementing the RFC 7748 elliptic Curve448 cryptosystem in hardware
Cryptography for next generation TLS: Implementing the RFC 7748 elliptic Curve448 cryptosystem in hardware
复制标题
下一代 TLS 的密码学：在硬件中实现 RFC 7748 椭圆 Curve448 密码系统
DOI：
--
复制
发表时间：
2017
期刊：
影响因子：
--
通讯作者：
Tim Güneysu
中科院分区：
文献类型：
--
作者：
Pascal Sasdrich;Tim Güneysu
在RFC 7748中，两条椭圆曲线Curve 25519和Curve 448被提出用于下一代TLS。这两条曲线的设计和优化纯粹是为了软件实现;它们在硬件中的实现或对侧信道攻击的物理保护在设计阶段没有考虑。最近，已经表明，对于Curve 25519，在硬件中沿着实现边信道保护是可行的，但是缺少高安全性Curve 448的结果。在这项工作中，我们证明，曲线448确实可以有效地和安全地实现在硬件中。我们提出了一种新的架构曲线448，可以计算超过1000点乘法每秒1580逻辑片和33个DSP单元的Xilinx XC 7Z 020 FPGA。
With RFC 7748 the two elliptic curves Curve25519 and Curve448 were proposed for the next generation of TLS. Both curves were designed and optimized purely for software implementation; their implementation in hardware or physical protection against side-channel attacks were not considered in the design phase. Recently, it has been shown that for Curve25519 an efficient implementations in hardware along with side-channel protection is feasible - yet results for the high-security Curve448 are missing. In this work we demonstrate that Curve448 can indeed be efficiently and securely implemented in hardware. We present a novel architecture for Curve448 that can compute more than 1000 point multiplications per second with 1580 logic slices and 33 DSP units of a Xilinx XC7Z020 FPGA.