Hyperelliptic curve coprocessors on a FPGA

  • Authors:
  • HoWon Kim;Thomas Wollinger;YongJe Choi;KyoIl Chung;Christof Paar

  • Affiliations:
  • Department of Electrical Engineering and Information Sciences, Ruhr-Universität Bochum, Germany;Department of Electrical Engineering and Information Sciences, Ruhr-Universität Bochum, Germany;Electronics and Telecommunications Research Institute, South Korea;Electronics and Telecommunications Research Institute, South Korea;Department of Electrical Engineering and Information Sciences, Ruhr-Universität Bochum, Germany

  • Venue:
  • WISA'04 Proceedings of the 5th international conference on Information Security Applications
  • Year:
  • 2004

Quantified Score

Hi-index 0.01

Visualization

Abstract

Cryptographic algorithms are used in a large variety of different applications to ensure security services. It is, thus, very interesting to investigate various implementation platforms. Hyperelliptic curve schemes are cryptographic primitives to which a lot of attention was recently given due to the short operand size compared to other algorithms. They are specifically interesting for special-purpose hardware. This paper provides a comprehensive investigation of high-efficient HEC architectures. We propose a genus-2 hyperelliptic curve cryptographic coprocessor using affine coordinates. We implemented a special class of hyperelliptic curves, namely using the parameter h(x)=x and f=x5+f1x+f0 and the base field GF(289). In addition, we only consider the most frequent case in our implementation and assume that the other cases are handled, e.g. by the protocol. We provide three different implementations ranging from high speed to moderate area. Hence, we provide a solution for a variety of applications. Our high performance HECC coprocessor is 78.5% faster than the best previous implementation and our low area implementation utilizes only 22.7% of the area that the smallest published design uses. Taking into account both area and latency, our coprocessor is an order of magnitude more efficient than previous implementations. We hope that the work at hand provides a step towards introducing HEC systems in practical applications.