Optimized IoT Cryptoprocessor Based on QC-MPDC Key Encapsulation Mechanism

• Published in: IEEE internet of things journal Vol. 7; no. 9; pp. 8513 - 8524
• Main Authors: Phoon, Jun-Hoe, Lee, Wai-Kong, Wong, Denis C.-K., Yap, Wun-She, Goi, Bok-Min, Phan, Raphael C.-W.
• Format: Journal Article
• Language: English
• Published: Piscataway IEEE 01.09.2020; The Institute of Electrical and Electronics Engineers, Inc. (IEEE)
• Subjects: Algorithms; Code-based cryptography; Computer systems; Cryptography; Curves; Decoding; Encapsulation; Encryption; Field programmable gate arrays; field-programmable gate array (FPGA); Internet of Things; Iterative methods; Logic gates; postquantum cryptography; Public key; public-key cryptography; Quantum computers; quasicyclic medium density parity check (QC-MDPC) McEliece
• ISSN: 2327-4662; 2327-4662
• DOI: 10.1109/JIOT.2020.2991334

The key encapsulation mechanism (KEM) is an important cryptographic tool to protect communication in the Internet of Things (IoT). In the near future, classical algorithms used to construct KEMs, such as RSA and elliptic curve cryptography, will be vulnerable to attacks from quantum computers. Recently, Yamada et al. proposed the quasicyclic medium density parity check (QC-MDPC) KEM, which is considered one of the most advanced code-based cryptosystems to resist quantum attacks. In this article, an optimized implementation of QC-MDPC KEM for IoT applications is presented. Our main contributions are threefold: 1) the fastest QC-MDPC McEliece decryption in field-programmable gate array (FPGA); 2) the first QC-MDPC KEM implementation in FPGA; and 3) the first iteration count attack-resistant QC-MDPC decoder in FPGA. To improve the decryption speed, we introduce a novel customized rotation engine (CRE) and incorporated several recent techniques reported in the literature, including adaptive threshold and Hamming weight estimation. The best-achieved throughput in our implementation on Xilinx Virtex 7 FPGA is 12.7% faster than the state-of-the-art result reported by Heyse et al. The proposed CRE was then integrated with QC-MDPC KEM to produce a fast and secure KEM. Furthermore, to prevent timing attacks demonstrated recently, a constant-time implementation of the QC-MDPC McEliece decoder was presented.