2020/08/19 by Ahmet Can Mert, Emre Karabulut, Erdinc Ozturk +5 · 1 citation
Computer Science · Mathematics · #Algorithm #Arithmetic #Coding theory and cryptography #Computer hardware #Computer science #Cryptographic Implementations and Security #Cryptography #Cryptography and Residue Arithmetic #Field-programmable gate array #Mathematics #Notation #Parallel computing #Virtex
paper · doi:10.1109/tc.2020.3017930
openalex publication_date 2020/08/19 · openalex created_date 2025/10/10 · openalex updated_date 2026/07/29
Efficient lattice-based cryptosystems operate with polynomial rings with the Number Theoretic Transform (NTT) to reduce the computational complexity of polynomial multiplication. NTT has therefore become a major arithmetic component (thus computational bottleneck) in various cryptographic constructions like hash functions, key-encapsulation mechanisms, digital signatures, and homomorphic encryption. Although there exist several hardware designs in prior work for NTT, they all are isolated design instances fixed for specific NTT parameters or parallelization level. This article provides an extensive study of flexible design methods for NTT implementation. To that end, we evaluate three cases: (1) parametric hardware design, (2) high-level synthesis (HLS) design approach, and (3) design for software implementation compiled on soft-core processors, where all are targeted on reconfigurable hardware devices. We evaluate the designs that implement multiple NTT parameters and/or processing elements, demonstrate the design details for each case, and provide a fair comparison with each other and prior work. On a Xilinx Virtex-7 FPGA, compared to HLS and processor-based methods, the results show that the parametric hardware design is on average4.4×and73.9×smaller and22.5×and19.3×faster, respectively. Surprisingly, HLS tools can yield less efficient solutions than processor-based approaches in some cases.