公开(公告)号：US20240126511A1

公开(公告)日：2024-04-18

申请号：US17935550

申请日：2022-09-26

Applicant: NXP B.V.

Inventor： Melissa Azouaoui ,  Yulia Kuzovkova ,  Tobias Schneider ,  Markus Schoenauer ,  Christine van Vredendaal

IPC: G06F7/72 ,  G06F9/30

CPC classification number: G06F7/724 ,  G06F9/3001 ,  G06F9/30029 ,  G06F2207/7233

Abstract: Various embodiments relate to a data processing system comprising instructions embodied in a non-transitory computer readable medium, the instructions for a cryptographic operation using masked compressing of coefficients of a polynomial having ns arithmetic shares for lattice-based cryptography in a processor, the instructions, including: shifting a first arithmetic share of the ns arithmetic shares by an input mask λ1; scaling the shifted first arithmetic share by a value based on a first compression factor δ and a masking scaling factor φ1; shifting the scaled first arithmetic share by a value based on the masking scaling factor φ1; scaling a second to ns shares of the ns arithmetic shares by a value based on the first compression factor δ and the masking scaling factor φ1; converting the ns scaled arithmetic shares to ns Boolean shares; right shifting the ns Boolean shares based upon the masking scaling factor φ1 and a second compression factor φ2; XORing an output mask λ2 with the shifted first Boolean share to produce ns compressed Boolean shares; and carrying out a cryptographic operation using the ns arithmetic shares when the ns compressed Boolean shares indicates that the coefficients of the polynomial are within boundary values.

公开(公告)号：US20240289094A1

公开(公告)日：2024-08-29

申请号：US18171133

申请日：2023-02-17

Applicant: NXP B.V.

Inventor： Joppe Willem Bos ,  Yulia Kuzovkova

IPC: G06F7/72

CPC classification number: G06F7/722

Abstract: A data processing system comprising instructions embodied in a non-transitory computer readable medium, the instructions for performing a modular multiplication of a first operand a and a second operand b in a DILITHIUM digital signature algorithm in a processor, the instructions, including: calculate S=c1·213−c1+c0 (mod q) wherein a·b1=c1·223+c0, 0≤a·b1