Title
Hardware Deployment of Hybrid PQC: SIKE plus ECDH
Abstract
In this work, we present a small architecture for quantum-safe hybrid key exchange targeting ECDH and SIKE. This is the first known hardware implementation of ECDH/SIKE-based hybrid key exchange in the literature. We propose new ECDH and EdDSA parameter sets defined over the SIKE primes. As a proof-of-concept, we evaluate SIKEX434, a hybrid PQC scheme composed of SIKEp434 and our proposed ECDH scheme X434 over a new, low-footprint architecture. Both schemes utilize the same 434-bit prime to save area. With only 1663 slices on a small Artix-7 device, our SIKE architecture can compute an entire hybrid key exchange in 320 ms. This is the smallest SIKE architecture in the literature. The hybrid SIKEX434 adds approximately 16% communication overhead and 10% latency overhead over SIKEp434. The additional overhead to support multiple primes indicates the need for new standardized ECC parameters for area-efficient designs in the future.
Year
DOI
Venue
2021
10.1007/978-3-030-90022-9_26
SECURITY AND PRIVACY IN COMMUNICATION NETWORKS, SECURECOMM 2021, PT II
Keywords
DocType
Volume
Hybrid cryptosystem, Isogeny-based cryptography, Elliptic curve cryptography, Field-programmable gate array
Conference
399
ISSN
Citations 
PageRank 
1867-8211
0
0.34
References 
Authors
0
4
Name
Order
Citations
PageRank
Reza Azarderakhsh100.68
Rami Elkhatib261.81
Brian Koziel300.68
Brandon Langenberg400.34