{"id":"arxiv:2306.01989","kind":"article","title":"Optimized Vectorization Implementation of CRYSTALS-Dilithium","authors":["Jieyu Zheng","Haoliang Zhu","Zhenyu Song","Zheng Wang","Yunlei Zhao"],"author_count":5,"year":2023,"published":"2023-06-03","venue":"IEEE Transactions on Dependable and Secure Computing","cited_by":4,"doi":"10.1109/tdsc.2025.3575915","arxiv_id":"2306.01989","nct_id":null,"source_url":"https://arxiv.org/abs/2306.01989","archive_url":"https://space-kitty.com/papers/arxiv:2306.01989","updated":"2023-10-31","pmid":null,"pmcid":null,"openalex_id":"W4410949561","pdf_url":"https://arxiv.org/pdf/2306.01989","abstract":"CRYSTALS-Dilithium is a lattice-based signature scheme to be standardized by NIST as the primary post-quantum signature algorithm. In this work, we make a thorough study of optimizing the implementations of Dilithium by utilizing the Advanced Vector Extension (AVX) instructions, specifically AVX2 and the latest AVX-512. We first present an improved parallel small polynomial multiplication with tailored early evaluation (PSPM-TEE) to further speed up the signing procedure. Our PSPM algorithm outperform the NTT by 47%-66% in AVX2 and AVX-512 implementation. We then present a tailored reduction method that is simpler and faster than Montgomery reduction. We minimize the CPU cycles of tailored reduction AVX-512 implementation by using AVX-512IFMA. Finally, we propose a fully and highly vectorized implementation of Dilithium using AVX-512. This is achieved by carefully vectorizing most of Dilithium functions with the AVX-512 instructions in order to improve efficiency both for time and for space simultaneously. With all the optimization efforts, our AVX-512 implementation improves the performance by 43.2%/39.3%/45.6% in key generation, 36.6%/41.6%/43.7% in signing, and 45.3%/46.5%/47.4% in verification for the parameter sets of Dilithium2/3/5 respectively. To the best of our knowledge, our AVX-512 implementation has the best performance for Dilithium on the Intel x86-64 CPU platform to date.","abstract_license":"CC0-1.0 (arXiv descriptive metadata)","license":null,"is_open_access":false,"retracted":false,"peer_reviewed":null,"categories":["cs.CR"],"details":null,"provenance":"arxiv","attribution":"Abstract: arXiv descriptive metadata (CC0). Thank you to arXiv for use of its open access interoperability. This service was not reviewed or approved by, nor does it necessarily express or reflect the policies or opinions of, arXiv.","topics":[{"slug":"quantum-communication-crypto","name":"Quantum Networks & Post-Quantum Cryptography","domain_slug":"quantum-computing"}],"cited_in_dossiers":[]}