Paper 2022/1635

FPT: a Fixed-Point Accelerator for Torus Fully Homomorphic Encryption

Michiel Van Beirendonck, KU Leuven
Jan-Pieter D'Anvers, KU Leuven
Furkan Turan, KU Leuven
Ingrid Verbauwhede, KU Leuven
Abstract

Fully Homomorphic Encryption (FHE) is a technique that allows computation on encrypted data. It has the potential to drastically change privacy considerations in the cloud, but high computational and memory overheads are preventing its broad adoption. TFHE is a promising Torus-based FHE scheme that heavily relies on bootstrapping, the noise-removal tool invoked after each encrypted logical/arithmetical operation. We present FPT, a Fixed-Point FPGA accelerator for TFHE bootstrapping. FPT is the first hardware accelerator to heavily exploit the inherent noise present in FHE calculations. Instead of double or single-precision floating-point arithmetic, it implements TFHE bootstrapping entirely with approximate fixed-point arithmetic. Using an in-depth analysis of noise propagation in bootstrapping FFT computations, FPT is able to use noise-trimmed fixed-point representations that are up to 50% smaller than prior implementations that prefer floating-point or integer FFTs. FPT is built as a streaming processor inspired by traditional streaming DSPs: it instantiates directly cascaded high-throughput computational stages, with minimal control logic and routing networks. We explore different throughput-balanced compositions of streaming kernels with a user-configurable streaming width in order to construct a full bootstrapping pipeline. Our proposed approach allows 100% utilization of arithmetic units and requires only a small bootstrapping key cache, enabling an entirely compute-bound bootstrapping throughput of 1 BS / 35$\mu$s. This is in stark contrast to the established classical CPU approach to FHE bootstrapping acceleration, which is typically constrained by memory and bandwidth. FPT is fully implemented and evaluated as a bootstrapping FPGA kernel for an Alveo U280 datacenter accelerator card. FPT achieves two to three orders of magnitude higher bootstrapping throughput than existing CPU-based implementations, and 2.5$\times$ higher throughput compared to recent ASIC emulation experiments.

Metadata
Available format(s)
PDF
Category
Implementation
Publication info
Published elsewhere. ACM CCS 2023
Keywords
Fully Homomorphic EncryptionTFHEHardwareAcceleratorFPGA
Contact author(s)
michiel vanbeirendonck @ esat kuleuven be
janpieter danvers @ esat kuleuven be
furkan turan @ esat kuleuven be
Ingrid Verbauwhede @ esat kuleuven be
History
2023-10-18: last of 2 revisions
2022-11-24: received
See all versions
Short URL
https://ia.cr/2022/1635
License
Creative Commons Attribution
CC BY

BibTeX

@misc{cryptoeprint:2022/1635,
      author = {Michiel Van Beirendonck and Jan-Pieter D'Anvers and Furkan Turan and Ingrid Verbauwhede},
      title = {FPT: a Fixed-Point Accelerator for Torus Fully Homomorphic Encryption},
      howpublished = {Cryptology ePrint Archive, Paper 2022/1635},
      year = {2022},
      note = {\url{https://eprint.iacr.org/2022/1635}},
      url = {https://eprint.iacr.org/2022/1635}
}
Note: In order to protect the privacy of readers, eprint.iacr.org does not use cookies or embedded third party content.