Cryptology ePrint Archive: Report 2021/493

Optimizing BIKE for the Intel Haswell and ARM Cortex-M4

Ming-Shing Chen and Tung Chou and Markus Krausz

Abstract: BIKE is a key encapsulation mechanism that entered the third round of the NIST post-quantum cryptography standardization process. This paper presents two constant-time implementations for BIKE, one tailored for the Intel Haswell and one tailored for the ARM Cortex-M4. Our Haswell implementation is much faster than the avx2 implementation written by the BIKE team: for bikel1, the level-1 parameter set, we achieve a 1.39x speedup for decapsulation (which is the slowest operation) and a 1.33x speedup for the sum of all operations. For bikel3, the level-3 parameter set, we achieve a 1.5x speedup for decapsulation and a 1.46x speedup for the sum of all operations. Our M4 implementation is more than two times faster than the non-constant-time implementation portable written by the BIKE team. The speedups are achieved by both algorithm-level and instruction-level optimizations.

Category / Keywords: implementation / constant-time implementations, NIST PQC standardization, Cortex- M4

Date: received 16 Apr 2021

Contact author: blueprint at crypto tw, mschen@crypto tw, markus krausz@rub de

Available format(s): PDF | BibTeX Citation

Version: 20210419:060913 (All versions of this report)

Short URL: ia.cr/2021/493


[ Cryptology ePrint archive ]