Parameters of Classic McEliece Cryptography

Paramètres de Classic McEliece
adaptés au calcul en mémoire
Demi-Journée Cryptographie Post-Quantique
Institut Cybersécurité Occitanie
3 Avril 2024
Cyrius NUGIER
1
=
+
1
=
+
1
=
+
SK size
PK size
CT size
Keygen
Encrypt
Decrypt
Kyber
SK size
PK size
CT size
Keygen
Encrypt
Decrypt
HQC
SK size
PK size
CT size
Keygen
Encrypt
Decrypt
NTRU
SK size
PK size
CT size
Keygen
Encrypt
Decrypt
McEliece
1
=
+
SK size
PK size
CT size
Keygen
Encrypt
Decrypt
Kyber
SK size
PK size
CT size
Keygen
Encrypt
Decrypt
HQC
SK size
PK size
CT size
Keygen
Encrypt
Decrypt
NTRU
SK size
PK size
CT size
Keygen
Encrypt
Decrypt
McEliece
1
=
+
SK size
PK size
CT size
Keygen
Encrypt
Decrypt
Kyber
SK size
PK size
CT size
Keygen
Encrypt
Decrypt
HQC
SK size
PK size
CT size
Keygen
Encrypt
Decrypt
NTRU
SK size
PK size
CT size
Keygen
Encrypt
Decrypt
McEliece
1
=
+
SK size
PK size
CT size
Keygen
Encrypt
Decrypt
Kyber
SK size
PK size
CT size
Keygen
Encrypt
Decrypt
HQC
SK size
PK size
CT size
Keygen
Encrypt
Decrypt
NTRU
SK size
PK size
CT size
Keygen
Encrypt
Decrypt
McEliece
=
+
SK size
PK size
CT size
Keygen
Encrypt
Decrypt
Kyber
SK size
PK size
CT size
Keygen
Encrypt
Decrypt
HQC
SK size
PK size
CT size
Keygen
Encrypt
Decrypt
NTRU
SK size
PK size
CT size
Keygen
Encrypt
Decrypt
McEliece
1
=
+
SK size
PK size
CT size
Keygen
Encrypt
Decrypt
Kyber
SK size
PK size
CT size
Keygen
Encrypt
Decrypt
HQC
SK size
PK size
CT size
Keygen
Encrypt
Decrypt
NTRU
SK size
PK size
CT size
Keygen
Encrypt
Decrypt
McEliece
1
=
+
SK size
PK size
CT size
Keygen
Encrypt
Decrypt
Kyber
SK size
PK size
CT size
Keygen
Encrypt
Decrypt
HQC
SK size
PK size
CT size
Keygen
Encrypt
Decrypt
NTRU
SK size
PK size
CT size
Keygen
Encrypt
Decrypt
McEliece
1
=
+
SK size
PK size
CT size
Keygen
Encrypt
Decrypt
Kyber
SK size
PK size
CT size
Keygen
Encrypt
Decrypt
HQC
SK size
PK size
CT size
Keygen
Encrypt
Decrypt
NTRU
SK size
PK size
CT size
Keygen
Encrypt
Decrypt
McEliece
1
Central
Processing
Unit
Control
Unit
Registers
Main Memory
Arithmetic
Logical Unit
L1
Cache
L2 / L3
 
2
Central
Processing
Unit
Control
Unit
Registers
Main Memory
Arithmetic
Logical Unit
L1
Cache
L2 / L3
SIMD
Registers
SIMD
Extension
2
L1
Cache
L2 / L3
Bit-line
Word-line
...
...
...
...
...
...
...
Column Peripheral
And, Or, Xor, Not
Nand, …
L1 Cache 16Ko
3
L1 Cache 16Ko
32 Ways
64 Bytes
8 Banks
4096 bits
4
Central
Processing
Unit
Control
Unit
Registers
Main Memory
Arithmetic
Logical
Unit
L1
Cache
L2 / L3
SIMD
Registers
SIMD
Extension
SK
PK
5
Central
Processing
Unit
Control
Unit
Registers
Main Memory
Arithmetic
Logical
Unit
L1
Cache
L2 / L3
SIMD
Registers
SIMD
Extension
SK
PK
5
1010011010
01110010
1010110
010110
3488 columns
768 rows
6
1
0000     ...
         10001010100
0
1
000  
               11101111011
00
1
00
                 00010011
000
1
0
0000
1
3488 columns
768 rows
6
 
XOR
 
AND
6
L1 Cache, 4096-bit parallelism
6
L1 Cache, 4096-bit parallelism
6
L1 Cache, 4096-bit parallelism
6
L1 Cache, 4096-bit parallelism
6
L1 Cache, 4096-bit parallelism
6
L1 Cache, 4096-bit parallelism
6
32-bit RISC-V
844 M total cycles
32-bit RISC-V 
with 16KB L1 PIM cache
66 M total cycles
Classic McEliece Public Key generation - 
Area proportional to number of cycles
7
A
L1 Cache, 4096-bit parallelism
8
E
D
C
B
A
L1 Cache, 4096-bit parallelism
8
E
D
C
B
A
L1 Cache, 4096-bit parallelism
8
E
D
C
B
A
L1 Cache, 4096-bit parallelism
_  
n - k 
= m
 x 
t
_
n
8
B
L1 Cache, 4096-bit parallelism
B''
B'
_
n
8
_  
n - k 
= m
 x 
t
Classic McEliece
9
Classic McEliece
BIKE
HQC
FHE ?
9
 ?
=
+
10
Paramètres de Classic McEliece
adaptés au calcul en mémoire
Demi-Journée Cryptographie Post-Quantique
Institut Cybersécurité Occitanie
3 Avril 2024
Cyrius NUGIER
Slide Note
Embed
Share

Post-Quantum cryptography is at the forefront of technological advancements, with the Classic McEliece cryptosystem being a notable player in this field. The presentation discusses the adaptation of Classic McEliece parameters for efficient memory usage, presented at the Institute of Cybersecurity in Occitanie on April 3, 2024 by Cyrius NUGIER. The slides cover aspects such as key sizes, encryption, decryption, and comparisons with other post-quantum cryptography schemes like Kyber, HQC, NTRU, and more.

  • Cryptography
  • Post-Quantum
  • McEliece
  • Parameters
  • Key Sizes

Uploaded on Mar 04, 2025 | 0 Views


Download Presentation

Please find below an Image/Link to download the presentation.

The content on the website is provided AS IS for your information and personal use only. It may not be sold, licensed, or shared on other websites without obtaining consent from the author.If you encounter any issues during the download, it is possible that the publisher has removed the file from their server.

You are allowed to download the files provided on this website for personal or commercial use, subject to the condition that they are used lawfully. All files are the property of their respective owners.

The content on the website is provided AS IS for your information and personal use only. It may not be sold, licensed, or shared on other websites without obtaining consent from the author.

E N D

Presentation Transcript


  1. Paramtres de Classic McEliece adapt s au calcul en m moire Demi-Journ e Cryptographie Post-Quantique Institut Cybers curit Occitanie 3 Avril 2024 Cyrius NUGIER

  2. 1

  3. = + 1

  4. = + 1

  5. SK size PK size CT size Keygen Encrypt Decrypt Kyber SK size PK size CT size Keygen Encrypt = + Decrypt HQC SK size PK size CT size Keygen Encrypt Decrypt SK size NTRU PK size CT size Keygen Encrypt Decrypt McEliece 1

  6. SK size PK size CT size Keygen Encrypt Decrypt Kyber SK size PK size CT size Keygen Encrypt = + Decrypt HQC SK size PK size CT size Keygen Encrypt Decrypt SK size NTRU PK size CT size Keygen Encrypt Decrypt McEliece 1

  7. SK size PK size CT size Keygen Encrypt Decrypt Kyber SK size PK size CT size Keygen Encrypt = + Decrypt HQC SK size PK size CT size Keygen Encrypt Decrypt SK size NTRU PK size CT size Keygen Encrypt Decrypt McEliece 1

  8. SK size PK size CT size Keygen Encrypt Decrypt Kyber SK size PK size CT size Keygen Encrypt = + Decrypt HQC SK size PK size CT size Keygen Encrypt Decrypt SK size NTRU PK size CT size Keygen Encrypt Decrypt McEliece

  9. SK size PK size CT size Keygen Encrypt Decrypt Kyber SK size PK size CT size Keygen Encrypt = + Decrypt HQC SK size PK size CT size Keygen Encrypt Decrypt SK size NTRU PK size CT size Keygen Encrypt Decrypt McEliece 1

  10. SK size PK size CT size Keygen Encrypt Decrypt Kyber SK size PK size CT size Keygen Encrypt = + Decrypt HQC SK size PK size CT size Keygen Encrypt Decrypt SK size NTRU PK size CT size Keygen Encrypt Decrypt McEliece 1

  11. SK size PK size CT size Keygen Encrypt Decrypt Kyber SK size PK size CT size Keygen Encrypt = + Decrypt HQC SK size PK size CT size Keygen Encrypt Decrypt SK size NTRU PK size CT size Keygen Encrypt Decrypt McEliece 1

  12. SK size PK size CT size Keygen Encrypt Decrypt Kyber SK size PK size CT size Keygen Encrypt = + Decrypt HQC SK size PK size CT size Keygen Encrypt Decrypt SK size NTRU PK size CT size Keygen Encrypt Decrypt McEliece 1

  13. Central Processing Control Unit Unit Arithmetic Logical Unit Registers L1 Cache L2 / L3 Main Memory 2

  14. Central Processing Control Unit Unit Arithmetic Logical Unit Registers SIMD Registers SIMD Extension L1 Cache L2 / L3 Main Memory 2

  15. Bit-line ... Word-line ... ... ... L1 ... ... Cache L2 / L3 ... Column Peripheral And, Or, Xor, Not Nand, 3

  16. L1 Cache 16Ko 32 Ways 4096 bits 64 Bytes 8 Banks 4

  17. Central Processing Control Unit Unit Arithmetic Logical Unit Registers SK PK SIMD Registers SIMD Extension L1 Cache L2 / L3 Main Memory 5

  18. Central Processing Control Unit Unit Arithmetic Logical Unit Registers SK SIMD Registers SIMD Extension PK L1 Cache L2 / L3 Main Memory 5

  19. 3488 columns 1010011010 01110010 1010110 010110 768 rows 6

  20. 3488 columns 10000 ... 10001010100 01000 11101111011 00100 00010011 00010 00001 768 rows 6

  21. XOR AND 6

  22. L1 Cache, 4096-bit parallelism 6

  23. L1 Cache, 4096-bit parallelism 6

  24. L1 Cache, 4096-bit parallelism 6

  25. L1 Cache, 4096-bit parallelism 6

  26. L1 Cache, 4096-bit parallelism 6

  27. L1 Cache, 4096-bit parallelism 6

  28. 32-bit RISC-V with 16KB L1 PIM cache 32-bit RISC-V 844 M total cycles 66 M total cycles 7 Classic McEliece Public Key generation - Area proportional to number of cycles

  29. L1 Cache, 4096-bit parallelism A 8

  30. L1 Cache, 4096-bit parallelism A B D C E 8

  31. L1 Cache, 4096-bit parallelism A B D C E 8

  32. L1 Cache, 4096-bit parallelism _ n - k = m x t A _n B D C E 8

  33. L1 Cache, 4096-bit parallelism _ n - k = m x t B' B _n B'' 8

  34. Classic McEliece Parameter Set 348864 460896 6688128 6960119 8192128 m 12 13 13 13 13 t 64 96 128 6688 119 6960 128 8192 n 3488 4608 m t n Category I III V V V 7 8 96 128 2400 4096 9

  35. Classic McEliece BIKE HQC FHE ? Parameter Set 348864 460896 6688128 6960119 8192128 m 12 13 13 13 13 t 64 96 128 6688 119 6960 128 8192 n 3488 4608 m t n Category I III V V V 7 8 96 128 2400 4096 ? 9

  36. = + 10

  37. Paramtres de Classic McEliece adapt s au calcul en m moire Demi-Journ e Cryptographie Post-Quantique Institut Cybers curit Occitanie 3 Avril 2024 Cyrius NUGIER

Related


More Related Content

giItT1WQy@!-/#giItT1WQy@!-/#giItT1WQy@!-/#