$\mu$Kummer: efficient hyperelliptic signatures and key exchange on microcontrollers - Inria - Institut national de recherche en sciences et technologies du numérique Access content directly
Conference Papers Year : 2016

$\mu$Kummer: efficient hyperelliptic signatures and key exchange on microcontrollers


We describe the design and implementation of efficient signature and key-exchange schemes for the AVR ATmega and ARM Cortex M0 microcontrollers, targeting the 128-bit security level. Our algorithms are based on an efficient Montgomery ladder scalar multiplication on the Kummer surface of Gaudry and Schost's genus-2 hyperelliptic curve, combined with the Jacobian point recovery technique of Costello, Chung, and Smith. Our results are the first to show the feasibility of software-only hyperelliptic cryptography on constrained platforms, and represent a significant improvement on the elliptic-curve state-of-the-art for both key exchange and signatures on these architectures. Notably, our key-exchange scalar-multiplication software runs in under 9740k cycles on the ATmega, and under 2650k cycles on the Cortex M0.
Fichier principal
Vignette du fichier
mukummer.pdf (343.19 Ko) Télécharger le fichier
Origin : Files produced by the author(s)

Dates and versions

hal-01300727 , version 1 (11-04-2016)





Joost Renes, Peter Schwabe, Benjamin Smith, Lejla Batina. $\mu$Kummer: efficient hyperelliptic signatures and key exchange on microcontrollers. Cryptographic Hardware and Embedded Systems – CHES 2016, IACR, Aug 2016, Santa Barbara, United States. pp.20, ⟨10.1007/978-3-662-53140-2_15⟩. ⟨hal-01300727⟩
347 View
376 Download



Gmail Facebook Twitter LinkedIn More