Enabling FrodoKEM on Embedded Devices

Abstract: FrodoKEM is a lattice-based Key Encapsulation Mechanism (KEM) based on unstructured lattices. From a security point of view this makes it a conservative option to achieve post-quantum security, hence why it is favored by several European authorities (e.g., German BSI and French ANSSI). Relying on unstructured instead of structured lattices (e.g., CRYSTALS-Kyber) comes at the cost of additional memory usage, which is particularly critical for embedded security applications such as smart cards. For example, prior FrodoKEM-640 implementations (using AES) on Cortex-M4 require more than 80 kB of stack making it impossible to run on some embedded systems. In this work, we explore several stack reduction strategies and the resulting time versus memory trade-offs. Concretely, we reduce the stack consumption of FrodoKEM by a factor 2–3x compared to the smallest known implementations with almost no impact on performance. We also present various time-memory trade-offs going as low as 8 kB for.... https://tches.iacr.org/index.php/TCHES/article/view/10957

Object Details

• Location: Deutsche Nationalbibliothek Frankfurt am Main
• Extent: Online-Ressource
• Language: Englisch

References and Relationships

• Bibliographic citation: Enabling FrodoKEM on Embedded Devices ; volume:2023 ; number:3 ; year:2023 ; IACR transactions on cryptographic hardware and embedded systems ; 2023, Heft 3 (2023)

Contributors, Places and Time

• Creator: Bos, Joppe W. ; Bronchain, Olivier ; Custers, Frank ; Renes, Joost ; Verbakel, Denise ; van Vredendaal, Christine

Further information

• DOI: 10.46586/tches.v2023.i3.74-96
• URN: urn:nbn:de:101:1-2023091111384783638942
• Rights: Open Access; Der Zugriff auf das Objekt ist unbeschränkt möglich.
• Last update: 14.08.0010, 9:46 AM CET