{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,6]],"date-time":"2026-06-06T14:34:04Z","timestamp":1780756444912,"version":"3.54.1"},"reference-count":31,"publisher":"Association for Computing Machinery (ACM)","issue":"2","license":[{"start":{"date-parts":[[2024,3,18]],"date-time":"2024-03-18T00:00:00Z","timestamp":1710720000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"name":"National Key Research and Development Program of China","award":["2021YFA1000600"],"award-info":[{"award-number":["2021YFA1000600"]}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"crossref","award":["62372273"],"award-info":[{"award-number":["62372273"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"crossref"}]},{"name":"Program of Taishan Young Scholars of the Shandong Province"},{"name":"Program of Qilu Young Scholars","award":["61580082063088"],"award-info":[{"award-number":["61580082063088"]}]},{"name":"Shandong University, Department of Science & Technology of Shandong Province","award":["SYS202201"],"award-info":[{"award-number":["SYS202201"]}]},{"name":"QuanCheng Laboratory","award":["QCLZD202306"],"award-info":[{"award-number":["QCLZD202306"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":["ACM Trans. Embed. Comput. Syst."],"published-print":{"date-parts":[[2024,3,31]]},"abstract":"<jats:p>Post-quantum cryptography is considered to provide security against both traditional and quantum computer attacks. Dilithium is a digital signature algorithm that derives its security from the challenge of finding short vectors in lattices. It has been selected as one of the standardizations in the NIST post-quantum cryptography project. Hardware-software co-design is a commonly adopted implementation strategy to address various implementation challenges, including limited resources, high performance, and flexibility requirements. In this study, we investigate using compact instruction set extensions (ISEs) for Dilithium, aiming to improve software efficiency with low hardware overheads. To begin with, we propose tightly coupled accelerators that are deeply integrated into the RISC-V processor. These accelerators target the most computationally demanding components in resource-constrained processors, such as polynomial generation, Number Theoretic Transform (NTT), and modular arithmetic. Next, we design a set of custom instructions that seamlessly integrate with the RISC-V base instruction formats, completing the accelerators in a compact manner. Subsequently, we implement our ISEs in a chip design for the Hummingbird E203 core and conduct performance benchmarks for Dilithium utilizing these ISEs. Additionally, we evaluate the resource consumption of the ISEs on FPGA and ASIC technologies. Compared to the reference software implementation on the RISC-V core, our co-design demonstrates a remarkable speedup factor ranging from 6.95 to 9.96. This significant improvement in performance is achieved by incorporating additional hardware resources, specifically, a 35% increase in LUTs, a 14% increase in FFs, 7 additional DSPs, and no additional RAM. Furthermore, compared to the state-of-the-art approach, our work achieves faster speed performance with a reduced circuit cost. Specifically, the usage of additional LUTs, FFs, and RAMs is reduced by 47.53%, 50.43%, and 100%, respectively. On ASIC technology, our approach demonstrates 12, 412 cell counts. Our co-design provides a better tradeoff implementation on speed performance and circuit overheads.<\/jats:p>","DOI":"10.1145\/3643826","type":"journal-article","created":{"date-parts":[[2024,2,2]],"date-time":"2024-02-02T12:49:08Z","timestamp":1706878148000},"page":"1-21","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":9,"title":["Compact Instruction Set Extensions for Dilithium"],"prefix":"10.1145","volume":"23","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-2432-482X","authenticated-orcid":false,"given":"Lu","family":"Li","sequence":"first","affiliation":[{"name":"the School of Cyber Science and Technology, Shandong University, Qingdao, China; Quan Cheng Laboratory, Jinan, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0009-6703-8031","authenticated-orcid":false,"given":"Qi","family":"Tian","sequence":"additional","affiliation":[{"name":"the School of Cyber Science and Technology, Shandong University, Qingdao, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0007-8267-9633","authenticated-orcid":false,"given":"Guofeng","family":"Qin","sequence":"additional","affiliation":[{"name":"the School of Cyber Science and Technology, Shandong University, Qingdao, China; Quan Cheng Laboratory, Jinan, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0003-6437-2292","authenticated-orcid":false,"given":"Shuaiyu","family":"Chen","sequence":"additional","affiliation":[{"name":"the School of Cyber Science and Technology, Shandong University, Qingdao, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6982-2537","authenticated-orcid":false,"given":"Weijia","family":"Wang","sequence":"additional","affiliation":[{"name":"the School of Cyber Science and Technology, Shandong University, Qingdao, China; Quan Cheng Laboratory, Jinan, China; Key Laboratory of Cryptologic Technology and Information Security of Ministry of Education, Qingdao, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2024,3,18]]},"reference":[{"key":"e_1_3_2_2_2","unstructured":"NIST. 2022. Selected Algorithms 2022. Retrieved from https:\/\/csrc.nist.gov\/Projects\/post-quantum-cryptography\/selected-algorithms-2022"},{"key":"e_1_3_2_3_2","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-09234-3_42"},{"key":"e_1_3_2_4_2","doi-asserted-by":"publisher","DOI":"10.13154\/tches.v2020.i3.336-357"},{"key":"e_1_3_2_5_2","doi-asserted-by":"publisher","DOI":"10.13154\/tches.v2020.i3.219-242"},{"key":"e_1_3_2_6_2","article-title":"Instruction Sets Should Be Free: The Case for RISC-V","author":"Asanovi\u0107 Krste","year":"2014","unstructured":"Krste Asanovi\u0107 and David A. Patterson. 2014. Instruction Sets Should Be Free: The Case for RISC-V. Technical Report. EECS Department, University of California, Berkeley, Tech. Rep. UCB\/EECS-2014-146.","journal-title":"EECS Department, University of California, Berkeley, Tech. Rep. UCB\/EECS-2014-146"},{"key":"e_1_3_2_7_2","article-title":"CRYSTALS-Kyber algorithm specifications and supporting documentation (version 3.0)","author":"Avanzi Roberto","year":"2020","unstructured":"Roberto Avanzi, Joppe Bos, L\u00e9o Ducas, Eike Kiltz, Tancr\u00e8de Lepoint, Vadim Lyubashevsky, John M. Schanck, Peter Schwabe, Gregor Seiler, and Damien Stehl\u00e9. 2020. CRYSTALS-Kyber algorithm specifications and supporting documentation (version 3.0). NIST Post-Quantum Cryptography Standardization Project. Retrieved from https:\/\/csrc.nist.gov\/CSRC\/media\/Projects\/post-quantum-cryptography\/documents\/round-3\/submissions\/Kyber-Round3.zip","journal-title":"NIST Post-Quantum Cryptography Standardization Project"},{"key":"e_1_3_2_8_2","unstructured":"Shi Bai L\u00e9o Ducas Eike Kiltz Tancr\u00e8de Lepoint Vadim Lyubashevsky Peter Schwabe Gregor Seiler and Damien Stehl\u00e9. 2021. CRYSTALS-Dilithium: Algorithm specifcations and supporting documentation (Version 3.1). Retrieved from https:\/\/pq-crystals.org\/dilithium\/data\/dilithium-specifcation-round3-20210208.pdf"},{"key":"e_1_3_2_9_2","doi-asserted-by":"publisher","DOI":"10.13154\/tches.v2019.i4.17-61"},{"key":"e_1_3_2_10_2","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-47721-7_24"},{"key":"e_1_3_2_11_2","article-title":"SABER: Mod-LWR based KEM (round 3 submission)","author":"Basso Andrea","year":"2020","unstructured":"Andrea Basso, Jose Maria Bermudo Mera, Jan-Pieter Danvers, Angshuman Karmakar, Sujoy Sinha Roy, Michiel Van Beirendonck, and Frederik Vercauteren. 2020. SABER: Mod-LWR based KEM (round 3 submission). NIST Post-Quantum Cryptography Standardization Project. Retrieved from https:\/\/csrc.nist.gov\/CSRC\/media\/Projects\/post-quantum-cryptography\/documents\/round-3\/submissions\/SABER-Round3.zip","journal-title":"NIST Post-Quantum Cryptography Standardization Project"},{"key":"e_1_3_2_12_2","doi-asserted-by":"publisher","DOI":"10.46586\/tches.v2022.i1.221-244"},{"key":"e_1_3_2_13_2","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-30872-7_18"},{"issue":"30","key":"e_1_3_2_14_2","first-page":"320","article-title":"Keccak specifications","volume":"3","author":"Bertoni Guido","year":"2009","unstructured":"Guido Bertoni, Joan Daemen, Micha\u00ebl Peeters, and Gilles Van Assche. 2009. Keccak specifications. Subm. NIST (Round 2) 3, 30 (2009), 320\u2013337.","journal-title":"Subm. NIST (Round 2)"},{"key":"e_1_3_2_15_2","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-23696-0_11"},{"key":"e_1_3_2_16_2","doi-asserted-by":"publisher","DOI":"10.1090\/S0025-5718-1965-0178586-1"},{"key":"e_1_3_2_17_2","article-title":"Falcon: Fast-fourier lattice-based compact signatures over NTRU","author":"Fouque Pierre-Alain","year":"2020","unstructured":"Pierre-Alain Fouque, Jeffrey Hoffstein, Paul Kirchner, Vadim Lyubashevsky, Thomas Pornin, Thomas Prest, Thomas Ricosset, Gregor Seiler, William Whyte, and Zhenfei Zhang. 2020. Falcon: Fast-fourier lattice-based compact signatures over NTRU. NIST Post-Quantum Cryptography Standardization Project. Retrieved from https:\/\/csrc.nist.gov\/CSRC\/media\/Projects\/post-quantum-cryptography\/documents\/round-3\/submissions\/Falcon-Round3.zip","journal-title":"NIST Post-Quantum Cryptography Standardization Project"},{"key":"e_1_3_2_18_2","doi-asserted-by":"publisher","DOI":"10.13154\/tches.v2020.i4.239-280"},{"key":"e_1_3_2_19_2","first-page":"563","volume-title":"Fall Joint Computer Conference","author":"Gentleman W. Morven","year":"1966","unstructured":"W. Morven Gentleman and Gordon Sande. 1966. Fast Fourier transforms: For fun and profit. In Fall Joint Computer Conference. 563\u2013578."},{"key":"e_1_3_2_20_2","doi-asserted-by":"publisher","DOI":"10.46586\/tches.v2021.i1.1-24"},{"key":"e_1_3_2_21_2","doi-asserted-by":"publisher","DOI":"10.1145\/3579092"},{"key":"e_1_3_2_22_2","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-97348-3_12"},{"key":"e_1_3_2_23_2","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-48965-0_8"},{"key":"e_1_3_2_24_2","doi-asserted-by":"publisher","DOI":"10.1090\/S0025-5718-1985-0777282-X"},{"key":"e_1_3_2_25_2","doi-asserted-by":"publisher","DOI":"10.1145\/3292548"},{"key":"e_1_3_2_26_2","doi-asserted-by":"publisher","DOI":"10.6028\/NIST.FIPS.204.ipd"},{"key":"e_1_3_2_27_2","article-title":"NewHope algorithm specifications and supporting documentation","author":"Poppelmann Thomas","year":"2019","unstructured":"Thomas Poppelmann, Erdem Alkim, Roberto Avanzi, Joppe Bos, Leo Ducas, Antonio de la Piedra, Peter Schwabe, Douglas Stebila, Martin R. Albrecht, Emmanuela Orsini, Valery Osheter, Kenneth G. Paterson, Guy Peer, and Nigel P. Smart. 2019. NewHope algorithm specifications and supporting documentation. NIST Post-Quantum Cryptography Standardization Project. Retrieved from https:\/\/csrc.nist.gov\/CSRC\/media\/Projects\/Post-Quantum-Cryptography\/documents\/round-2\/submissions\/NewHope-Round2.zip","journal-title":"NIST Post-Quantum Cryptography Standardization Project"},{"key":"e_1_3_2_28_2","doi-asserted-by":"publisher","DOI":"10.1137\/S0097539795293172"},{"key":"e_1_3_2_29_2","unstructured":"Nuclei System Technology. 2020. Open-source Hummingbirdv2 E203 RISC-V processor Core and SoC. Retrieved from https:\/\/github.com\/riscv-mcu\/e203_hbirdv2"},{"key":"e_1_3_2_30_2","doi-asserted-by":"publisher","DOI":"10.46586\/tches.v2022.i1.270-295"},{"key":"e_1_3_2_31_2","doi-asserted-by":"publisher","DOI":"10.1109\/TCSI.2022.3162593"},{"key":"e_1_3_2_32_2","doi-asserted-by":"publisher","DOI":"10.1145\/3447812"}],"container-title":["ACM Transactions on Embedded Computing Systems"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3643826","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3643826","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T22:49:56Z","timestamp":1750286996000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3643826"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,3,18]]},"references-count":31,"journal-issue":{"issue":"2","published-print":{"date-parts":[[2024,3,31]]}},"alternative-id":["10.1145\/3643826"],"URL":"https:\/\/doi.org\/10.1145\/3643826","relation":{},"ISSN":["1539-9087","1558-3465"],"issn-type":[{"value":"1539-9087","type":"print"},{"value":"1558-3465","type":"electronic"}],"subject":[],"published":{"date-parts":[[2024,3,18]]},"assertion":[{"value":"2023-08-03","order":0,"name":"received","label":"Received","group":{"name":"publication_history","label":"Publication History"}},{"value":"2024-01-13","order":1,"name":"accepted","label":"Accepted","group":{"name":"publication_history","label":"Publication History"}},{"value":"2024-03-18","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}