Experimental Comparison of Crypto-processors Architectures for Elliptic and Hyper-Elliptic Curves Cryptography - Inria - Institut national de recherche en sciences et technologies du numérique
Documents Associated With Scientific Events Year : 2015

Experimental Comparison of Crypto-processors Architectures for Elliptic and Hyper-Elliptic Curves Cryptography

Abstract

Public key cryptography is required in many applications such as key exchange, digital signature and some speci fic encryption schemes. Elliptic curve cryptography (ECC) has become the standard public-key crypto-system in many countries, where it has superseeded RSA thanks to its lower cost and much better performance. For instance, ECC uses a mere 224-bit key to replace a 2048-bit RSA key, for the same theoretical level of security. Recent research has pointed out hyper-elliptic curve cryptography (HECC) as a possible way to further improve public-key crypto-systems. HECC can provide the same theoretical level of security as ECC, with keys and finite eld elements that are only half the size, albeit curve operations require more computation steps. In order to provide a fair comparison of ECC and HECC, one needs to implement, optimize and analyze them within the same experimental setup. Our research group has been studying and implementing arithmetic operators, hardware accelerators and counter-measures for ECC for a long time, and has more recently taken an interest in HECC. Our goal for the near future is to evaluate the possible trade-o ffs between computation time, implementation costs (silicon area and energy consumption) and resilience to physical attacks (side-channel analysis in particular) for HECC. In this work, we present a customizable crypto-processor dedicated to ECC or HECC. The processor has been fully implemented and validated on FPGA. We are also developing dedicated programming tools (assembler, small compiler and a library of ECC/HECC cryptographific primitives). We present implementation results (on Xilinx Spartan 6 LX75) and comparisons for various con figurations of the crypto-processor. Using an exploration of the number of parallel arithmetic units and of their inner sizes/performances, we are able to propose a large number of speed-area trade-off s so as to best answer the speci c constraints of each application. Our experimental results tend to con rm that HECC is more ecient than ECC for the same theoretical security level, with an approximate 40% speed improvement for equivalent silicon areas. We plan to distribute some con gurations of our (H)ECC crypto-processor and the programming tools in open source in the future.
Fichier principal
Vignette du fichier
slides-CryptArchi.pdf (5.63 Mo) Télécharger le fichier
Origin Files produced by the author(s)
Loading...

Dates and versions

hal-01197048 , version 1 (11-09-2015)

Identifiers

  • HAL Id : hal-01197048 , version 1

Cite

Gabriel Gallin, Arnaud Tisserand, Nicolas Veyrat-Charvillon. Experimental Comparison of Crypto-processors Architectures for Elliptic and Hyper-Elliptic Curves Cryptography. CryptArchi: 13th International Workshops on Cryptographic Architectures Embedded in Reconfigurable Devices, Jun 2015, Leuven, Belgium. . ⟨hal-01197048⟩
1890 View
138 Download

Share

More