### Enhanced Lattice-Based Signatures on Reconfigurable Hardware

Thomas Pöppelmann, Lëo Ducas, and Tim Güneysu

##### Abstract

The recent Bimodal Lattice Signature Scheme (BLISS) showed that lattice-based constructions have evolved to practical alternatives to RSA or ECC. It offers small signatures of 5600 bits for a 128-bit level of security, and proved to be very fast in software. However, due to the complex sampling of Gaussian noise with high precision, it is not clear whether this scheme can be mapped efficiently to embedded devices. Even though the authors of BLISS also proposed a new sampling algorithm using Bernoulli variables this approach is more complex than previous methods using large precomputed tables. The clear disadvantage of using large tables for high performance is that they cannot be used on constrained computing environments, such as FPGAs, with limited memory. In this work we thus present techniques for an efficient Cumulative Distribution Table (CDT) based Gaussian sampler on reconfigurable hardware involving Peikert's convolution lemma and the Kullback-Leibler divergence. Based on our enhanced sampler design, we provide a scalable implementation of BLISS signing and verification on a Xilinx Spartan-6 FPGA supporting either 128-bit, 160-bit, or 192-bit security. For high speed we integrate fast FFT/NTT-based polynomial multiplication, parallel sparse multiplication, Huffman compression of signatures, and Keccak as hash function. Additionally, we compare the CDT with the Bernoulli approach and show that for the particular BLISS-I parameter set the improved CDT approach is faster with lower area consumption. Our BLISS-I core uses 2,291 slices, 5.5 BRAMs, and 5 DSPs and performs a signing operation in 114.1 us on average. Verification is even faster with a latency of 61.2 us and 17,101 supported verification operations per second.

Note: Corrects \eta <= 3.92 to \eta <= 3.860

Available format(s)
Category
Implementation
Publication info
A major revision of an IACR publication in CHES 2014
Contact author(s)
thomas poeppelmann @ rub de
History
2015-02-20: last of 3 revisions
See all versions
Short URL
https://ia.cr/2014/254

CC BY

BibTeX

@misc{cryptoeprint:2014/254,
author = {Thomas Pöppelmann and Lëo Ducas and Tim Güneysu},
title = {Enhanced Lattice-Based Signatures on Reconfigurable Hardware},
howpublished = {Cryptology ePrint Archive, Paper 2014/254},
year = {2014},
note = {\url{https://eprint.iacr.org/2014/254}},
url = {https://eprint.iacr.org/2014/254}
}

Note: In order to protect the privacy of readers, eprint.iacr.org does not use cookies or embedded third party content.