Cryptology ePrint Archive: Report 2021/492

Classic McEliece on the ARM Cortex-M4

Ming-Shing Chen and Tung Chou

Abstract: This paper presents a constant-time implementation of Classic McEliece for ARM Cortex-M4. Specifically, our target platform is stm32f4-Discovery, a development board on which the amount of SRAM is not even large enough to hold the public key of the smallest parameter sets of Classic McEliece. Fortunately, the flash memory is large enough, so we use it to store the public key. For the level-1 parameter sets mceliece348864 and mceliece348864f, our implementation takes 582 199 cycles for encapsulation and 2 706 681 cycles for decapsulation. Compared to the level-1 parameter set of FrodoKEM, our encapsulation time is more than 80 times faster, and our decapsulation time is more than 17 times faster. For the level-3 parameter sets mceliece460896 and mceliece460896f, our implementation takes 1 081 335 cycles for encapsulation and 6 535 186 cycles for decapsulation. In addition, our implementation is also able to carry out key generation for the level-1 parameter sets and decapsulation for level-5 parameter sets on the board.

Category / Keywords: implementation / Classic McEliece, Cortex-M4, Constant-time implementations, NIST PQC standardization

Date: received 16 Apr 2021

Contact author: blueprint at crypto tw, mschen@crypto tw

Available format(s): PDF | BibTeX Citation

Version: 20210419:060837 (All versions of this report)

Short URL: ia.cr/2021/492


[ Cryptology ePrint archive ]