Enabling FrodoKEM on Embedded Devices

Abstract: FrodoKEM is a lattice-based Key Encapsulation Mechanism (KEM) based on unstructured lattices. From a security point of view this makes it a conservative option to achieve post-quantum security, hence why it is favored by several European authorities (e.g., German BSI and French ANSSI). Relying on unstructured instead of structured lattices (e.g., CRYSTALS-Kyber) comes at the cost of additional memory usage, which is particularly critical for embedded security applications such as smart cards. For example, prior FrodoKEM-640 implementations (using AES) on Cortex-M4 require more than 80 kB of stack making it impossible to run on some embedded systems. In this work, we explore several stack reduction strategies and the resulting time versus memory trade-offs. Concretely, we reduce the stack consumption of FrodoKEM by a factor 2–3x compared to the smallest known implementations with almost no impact on performance. We also present various time-memory trade-offs going as low as 8 kB for.... https://tches.iacr.org/index.php/TCHES/article/view/10957

Angaben zum Objekt

• Standort: Deutsche Nationalbibliothek Frankfurt am Main
• Umfang: Online-Ressource
• Sprache: Englisch

Verweise und Beziehungen

• Erschienen in: Enabling FrodoKEM on Embedded Devices ; volume:2023 ; number:3 ; year:2023 ; IACR transactions on cryptographic hardware and embedded systems ; 2023, Heft 3 (2023)

Beteiligte, Orts- und Zeitangaben

• Urheber: Bos, Joppe W. ; Bronchain, Olivier ; Custers, Frank ; Renes, Joost ; Verbakel, Denise ; van Vredendaal, Christine

Weitere Informationen

• DOI: 10.46586/tches.v2023.i3.74-96
• URN: urn:nbn:de:101:1-2023091111384783638942
• Rechteinformation: Open Access; Der Zugriff auf das Objekt ist unbeschränkt möglich.
• Letzte Aktualisierung: 14.08.2025, 10:46 MESZ