A Lightweight Implementation of NTRU Prime for the Post-quantum Internet of Things - Information Security Theory and Practice Access content directly
Conference Papers Year : 2020

A Lightweight Implementation of NTRU Prime for the Post-quantum Internet of Things

Hao Cheng
  • Function : Author
  • PersonId : 1093952
Daniel Dinu
  • Function : Author
  • PersonId : 1093953
Johann Grossschädl
  • Function : Author
  • PersonId : 1009956
Peter B. Rønne
  • Function : Author
  • PersonId : 1093954
Peter Ryan
  • Function : Author
  • PersonId : 1093955


The dawning era of quantum computing has initiated various initiatives for the standardization of post-quantum cryptosystems with the goal of (eventually) replacing RSA and ECC. NTRU Prime is a variant of the classical NTRU cryptosystem that comes with a couple of tweaks to minimize the attack surface; most notably, it avoids rings with “worrisome” structure. This paper presents, to our knowledge, the first assembler-optimized implementation of Streamlined NTRU Prime for an 8-bit AVR microcontroller and shows that high-security lattice-based cryptography is feasible for small IoT devices. An encapsulation operation using parameters for 128-bit post-quantum security requires 8.2 million clock cycles when executed on an 8-bit ATmega1284 microcontroller. The decapsulation is approximately twice as costly and has an execution time of 15.6 million cycles. We achieved this performance through (i) new low-level software optimization techniques to accelerate Karatsuba-based polynomial multiplication on the 8-bit AVR platform and (ii) an efficient implementation of the coefficient modular reduction written in assembly language. The execution time of encapsulation and decapsulation is independent of secret data, which makes our software resistant against timing attacks. Finally, we assess the performance one could theoretically gain by using a so-called product-form polynomial as part of the secret key and discuss potential security implications.
Fichier principal
Vignette du fichier
492809_1_En_7_Chapter.pdf (335.65 Ko) Télécharger le fichier
Origin : Files produced by the author(s)

Dates and versions

hal-03173904 , version 1 (18-03-2021)





Hao Cheng, Daniel Dinu, Johann Grossschädl, Peter B. Rønne, Peter Ryan. A Lightweight Implementation of NTRU Prime for the Post-quantum Internet of Things. 13th IFIP International Conference on Information Security Theory and Practice (WISTP), Dec 2019, Paris, France. pp.103-119, ⟨10.1007/978-3-030-41702-4_7⟩. ⟨hal-03173904⟩
127 View
155 Download



Gmail Facebook X LinkedIn More