基于FPGA的格基数字签名算法硬件优化
CSTR:
作者:
作者单位:

作者简介:

通讯作者:

中图分类号:

基金项目:

国家重点研发计划(2022YFB2701601); 上海市协同创新基金(XTCX-KJ-2023-54); 上海市科委区块链关键技术攻关专项基金(23511100300)


Hardware Optimization of Lattice-based Digital Signature Algorithm Based on FPGA
Author:
Affiliation:

Fund Project:

  • 摘要
  • |
  • 图/表
  • |
  • 访问统计
  • |
  • 参考文献
  • |
  • 相似文献
  • |
  • 引证文献
  • |
  • 资源附件
  • |
  • 文章评论
    摘要:

    数字签名算法对于网络安全基础设施有至关重要的作用, 目前的数字签名方案大多是基于Rivest-Shamir-Adleman (RSA)和椭圆曲线密码学(ECC)实现的. 随着量子计算技术的快速发展, 基于传统的公钥密码体系的数字签名方案将面临安全性风险, 研究和部署能够抵抗量子攻击的新型密码方案成为重要的研究方向. 经过多轮评估分析, 美国国家标准研究院(National Institute of Standards and Technology, NIST)于2024年8月公布了后量子数字签名标准方案ML-DSA, 其核心算法是Dilithium. 针对格基数字签名算法Dilithium高维多项式矩阵运算的特点, 基于FPGA平台提出了多种优化实现方法, 具体包括可配置参数的多功能脉动阵列运算单元、专用型多项式并行采样模块、针对多参数集的可重构存储单元设计、针对复杂多模块的高并行度时序状态机, 旨在突破性能瓶颈以实现更高的签名运算效率, 并最终实现了可同时支持3种安全等级的数字签名硬件架构. 该设计方案在Xilinx Artix-7 FPGA平台上进行了实际的部署和运行, 并且和已有的同类型工作进行了对比. 结果表明, 与最新的文献相比, 该设计方案在3种安全等级下的签名运算效率分别提升了7.4、8.3和5.6倍, 为抗量子安全的数字签名运算服务提供了性能基础, 并且对于推进格密码方案的工程化和实用化进程提供了一定的借鉴意义和参考价值.

    Abstract:

    Digital signature algorithms play a vital role in network security infrastructure. The majority of current digital signature schemes rely on RSA and ECC. However, with the rapid advancement of quantum computing, traditional public-key cryptographic schemes face increasing security risks. As a result, researching and deploying cryptographic schemes capable of resisting quantum attacks has become a critical research direction. Following multiple rounds of evaluation and analysis, National Institute of Standards and Technology (NIST) announced the post-quantum digital signature standard ML-DSA in August 2024, with Dilithium as its core algorithm. In light of the high-dimensional polynomial matrix operations characteristic of Dilithium, this study proposes various optimization strategies based on the FPGA platform. These include multifunctional systolic array operation units with configurable parameters, dedicated polynomial parallel sampling modules, reconfigurable storage units designed for multiple parameter sets, and high-parallelism timing state machines tailored for complex multi-module architectures. These optimizations aim to overcome performance bottlenecks and achieve enhanced signature operation efficiency, ultimately realizing a digital signature hardware architecture that supports three security levels simultaneously. The proposed hardware architecture is deployed and evaluated on the Xilinx Artix-7 FPGA platform and compared against existing implementations. The results demonstrate that the proposed design achieves improvements in signature operation efficiency by factors of 7.4, 8.3, and 5.6 across the three security levels, respectively. This advancement provides a robust performance foundation for quantum-resistant digital signature applications and offers valuable insights for the engineering and practical deployment of lattice cryptographic schemes.

    参考文献
    相似文献
    引证文献
引用本文

胡跃,赵旭阳,王威,袁谦,郑婕妤,杨亚芳.基于FPGA的格基数字签名算法硬件优化.软件学报,2025,36(10):4461-4482

复制
相关视频

分享
文章指标
  • 点击次数:
  • 下载次数:
  • HTML阅读次数:
  • 引用次数:
历史
  • 收稿日期:2024-06-30
  • 最后修改日期:2024-09-05
  • 录用日期:
  • 在线发布日期: 2025-01-20
  • 出版日期: 2025-10-06
文章二维码
您是第位访问者
版权所有:中国科学院软件研究所 京ICP备05046678号-3
地址:北京市海淀区中关村南四街4号,邮政编码:100190
电话:010-62562563 传真:010-62562533 Email:jos@iscas.ac.cn
技术支持:北京勤云科技发展有限公司

京公网安备 11040202500063号