TY - BOOK
T1 - Kummer strikes back : new DH speed records
AU - Bernstein, D.J.
AU - Chuengsatiansup, C.
AU - Lange, T.
AU - Schwabe, P.
PY - 2014
Y1 - 2014
N2 - This paper introduces high-security constant-time variable-base-point Diffie--Hellman software using just 274593 Cortex-A8 cycles, 91460 Sandy Bridge cycles, 90896 Ivy Bridge cycles, or 72220 Haswell cycles. The only higher speed appearing in the literature for any of these platforms is a claim of 60000 Haswell cycles for unpublished software performing arithmetic on a binary elliptic curve.
The new speeds rely on a synergy between (1) state-of-the-art formulas for genus-2 hyperelliptic curves and (2) a modern trend towards vectorization in CPUs. The paper introduces several new techniques for efficient vectorization of Kummer-surface computations.
Keywords: implementation / performance, Diffie--Hellman, hyperelliptic curves, Kummer surfaces, vectorization
AB - This paper introduces high-security constant-time variable-base-point Diffie--Hellman software using just 274593 Cortex-A8 cycles, 91460 Sandy Bridge cycles, 90896 Ivy Bridge cycles, or 72220 Haswell cycles. The only higher speed appearing in the literature for any of these platforms is a claim of 60000 Haswell cycles for unpublished software performing arithmetic on a binary elliptic curve.
The new speeds rely on a synergy between (1) state-of-the-art formulas for genus-2 hyperelliptic curves and (2) a modern trend towards vectorization in CPUs. The paper introduces several new techniques for efficient vectorization of Kummer-surface computations.
Keywords: implementation / performance, Diffie--Hellman, hyperelliptic curves, Kummer surfaces, vectorization
M3 - Report
T3 - Cryptology ePrint Archive
BT - Kummer strikes back : new DH speed records
PB - International Association for Cryptologic Research
ER -