Paper 2017/388

Post-Quantum Key Exchange on ARMv8-A -- A New Hope for NEON made Simple

Silvan Streit and Fabrizio De Santis

Abstract

NewHope and NewHope-Simple are two recently proposed post-quantum key exchange protocols based on the hardness of the Ring-LWE problem. Due to their high security margins and performance, there have been already discussions and proposals for integrating them into Internet standards, like TLS, and anonymity network protocols, like Tor. In this work, we present time-constant and vector-optimized implementations of NewHope and NewHope-Simple for ARMv8-A 64-bit processors which target high-speed applications. This architecture is implemented in a growing number of smart phone and tablet processors, and features powerful 128-bit SIMD operations provided by the NEON engine. In particular, we propose the use of three alternative modular reduction methods, which allow to better exploit NEON parallelism by avoiding larger data types during the Number Theoretic Transform (NTT) and remove the need to transform input coefficients into Montgomery domain during pointwise multiplications. The NEON vectorized NTT uses a 16-bit unsigned integer representation and executes in only 18, 909 clock cycles on an ARM Cortex-A53 core. Our implementation improves previous assembly-optimized results on ARM NEON platforms by a factor of 3.4 and outperforms the C reference implementation on the same platform by a factor of 8.3. The total time spent on the key exchange was reduced by more than a factor of 3.5 for both protocols.

Metadata
Available format(s)
PDF
Category
Implementation
Publication info
Preprint. MINOR revision.
Keywords
ARMv8-ANEONARM Cortex-A53Post-Quantum Key ExchangeRing-LWENewHopeNewHope-SimpleNTT
Contact author(s)
desantis @ tum de
History
2017-05-04: received
Short URL
https://ia.cr/2017/388
License
Creative Commons Attribution
CC BY

BibTeX

@misc{cryptoeprint:2017/388,
      author = {Silvan Streit and Fabrizio De Santis},
      title = {Post-Quantum Key Exchange on {ARMv8}-A -- A New Hope for {NEON} made Simple},
      howpublished = {Cryptology {ePrint} Archive, Paper 2017/388},
      year = {2017},
      url = {https://eprint.iacr.org/2017/388}
}
Note: In order to protect the privacy of readers, eprint.iacr.org does not use cookies or embedded third party content.