Paper 2022/405

Benchmarking and Analysing the NIST PQC Lattice-Based Signature Schemes Standards on the ARM Cortex M7

James Howe, SandboxAQ
Bas Westerbaan, Cloudflare
Abstract

This paper presents an analysis of the two lattice-based digital signature schemes, Dilithium and Falcon, which have been chosen by NIST for standardisation, on the ARM Cortex M7 using the STM32F767ZI NUCLEO-144 development board. This research is motivated by the ARM Cortex M7 device being the only processor in the Cortex-M family to offer a double precision (i.e., 64-bit) floating-point unit, making Falcon's implementations, requiring 53 bits of double precision, able to fully run native floating-point operations without any emulation. When benchmarking natively, Falcon shows significant speed-ups between 6.2-8.3x in clock cycles, 6.2-11.8x in runtime, and Dilithium does not show much improvement other than those gained by the slightly faster processor. We then present profiling results of the two schemes on the ARM Cortex M7 to show their respective bottlenecks and operations where the improvements are and can be made. This demonstrates, for example, that some operations in Falcon's procedures observe speed-ups by an order of magnitude. Finally, since Falcon's use of floating points is so rare in cryptography, we test the native FPU instructions on 4 different STM32 development boards with the ARM Cortex M7 and also a Raspberry Pi 3 which is used in some of Falcon's official benchmarking results. We find constant-time irregularities in all of these devices, which makes Falcon insecure on these devices for applications where signature generation can be timed by an attacker.

Metadata
Available format(s)
PDF
Category
Implementation
Publication info
Published elsewhere. Minor revision. AFRICACRYPT
DOI
10.1007/978-3-031-37679-5_19
Keywords
post-quantum cryptographyNIST PQClattice-based cryptographyARM Cortex M7
Contact author(s)
james howe @ sandboxaq com
bas @ westerbaan name
History
2023-07-14: revised
2022-03-31: received
See all versions
Short URL
https://ia.cr/2022/405
License
Creative Commons Attribution
CC BY

BibTeX

@misc{cryptoeprint:2022/405,
      author = {James Howe and Bas Westerbaan},
      title = {Benchmarking and Analysing the {NIST} {PQC} Lattice-Based Signature Schemes Standards on the {ARM} Cortex M7},
      howpublished = {Cryptology {ePrint} Archive, Paper 2022/405},
      year = {2022},
      doi = {10.1007/978-3-031-37679-5_19},
      url = {https://eprint.iacr.org/2022/405}
}
Note: In order to protect the privacy of readers, eprint.iacr.org does not use cookies or embedded third party content.