Optimized IoT Cryptoprocessor Based on QC-MPDC Key Encapsulation Mechanism
| Autor: | Raphael C.-W. Phan, Bok-Min Goi, Denis C. K. Wong, Jun-Hoe Phoon, Wun-She Yap, Wai-Kong Lee |
|---|---|
| Rok vydání: | 2020 |
| Předmět: |
Computer Networks and Communications
business.industry Computer science Cryptography 02 engineering and technology 020202 computer hardware & architecture Computer Science Applications Public-key cryptography Timing attack Secure cryptoprocessor Hardware and Architecture Embedded system Signal Processing McEliece cryptosystem 0202 electrical engineering electronic engineering information engineering Cryptosystem 020201 artificial intelligence & image processing Key encapsulation Elliptic curve cryptography business Information Systems |
| Zdroj: | IEEE Internet of Things Journal. 7:8513-8524 |
| ISSN: | 2372-2541 |
| Popis: | The key encapsulation mechanism (KEM) is an important cryptographic tool to protect communication in the Internet of Things (IoT). In the near future, classical algorithms used to construct KEMs, such as RSA and elliptic curve cryptography, will be vulnerable to attacks from quantum computers. Recently, Yamada et al. proposed the quasicyclic medium density parity check (QC-MDPC) KEM, which is considered one of the most advanced code-based cryptosystems to resist quantum attacks. In this article, an optimized implementation of QC-MDPC KEM for IoT applications is presented. Our main contributions are threefold: 1) the fastest QC-MDPC McEliece decryption in field-programmable gate array (FPGA); 2) the first QC-MDPC KEM implementation in FPGA; and 3) the first iteration count attack-resistant QC-MDPC decoder in FPGA. To improve the decryption speed, we introduce a novel customized rotation engine (CRE) and incorporated several recent techniques reported in the literature, including adaptive threshold and Hamming weight estimation. The best-achieved throughput in our implementation on Xilinx Virtex 7 FPGA is 12.7% faster than the state-of-the-art result reported by Heyse et al. The proposed CRE was then integrated with QC-MDPC KEM to produce a fast and secure KEM. Furthermore, to prevent timing attacks demonstrated recently, a constant-time implementation of the QC-MDPC McEliece decoder was presented. |
| Databáze: | OpenAIRE |
| Externí odkaz: |
|