13
A Public-key Cryptographic Processor for RSA and ECC Hans Eberle, Nils Gura, Sheueling Chang Shantz, Vipul Gupta, Leonard Rarick Sun Microsystems Laboratories {hans.eberle, nils.gura, sheueling.chang, vipul.gupta, leonard.rarick}@sun.com Shreyas Sundaram University of Waterloo [email protected] Abstract We describe a general-purpose processor architecture for accelerating public-key compu- tati ons on serve r systems that demand high perfo rmanc e and flexi bilit y to ac co mmodate large numbers of secure connections with heterogeneous clients that are likely to be limited in the set of cryptogr aphic algorithms suppor ted. Flexibility is achieved in that the processor supports multiple public-key cryptosystems, namely RSA, DSA, DH, and ECC, arbitrary key sizes and, in the case of ECC, arbitrary curves over fields  GF (  p)  and  GF (2 m ). At the core of the processor is a novel dual-field multiplier based on a modified carry- save adder (CSA) tre e that suppor ts bo th  GF (  p)  and  GF (2 m ). In th e ca se of a 64 -bit  integer multiplier, the necessary modifications increase its size by a mere 5%. To efficiently schedule the multiplier, we implemented a multiply-accumulate instruction that combines sever al steps of a multiple-p r ecision multi plication in a singl e op er ation : multi plication, carry propagation, and partial product accumulation. We have developed a hardware prototype of the cryptographic processor in FPGA tech- nology. If imple mente d in curr ent 1.5 GHz pro ce ssor te chnol ogy, the pr ocessor exe cutes 5,265 RSA-1024 op/s and 25,756 ECC-163 op/s - the given key sizes offer comparable se- curit y str ength. Looking at futur e security levels, performance is 786 op/s for RSA-20 48 and 9,576 op/s for ECC-233. 1 Introduction In this paper we describe an extension to a general-purpose processor for accelerating public-key cryptosystems. Supported are the legacy cryptosystems RSA and DH as well as the newly emerging Elliptic Curve Crypto graph y (ECC) syst em. As we will show, minimal extensions suffice to efficiently support these public-key cryptosystems. Due to its comput ational effic iency, ECC is eme rgi ng as an att rac tiv e alternative to traditional public-key cryptosystems such as RSA, DSA, and DH. More specifically, ECC offers equivalent security with smaller key sizes, in less computation time and with less memory. As a res ult , ECC offers higher thr oug hput on the server side [9] and smaller implementations on the clien t side. By saving system reso urces ECC is partic ularly wel l suited for small devices such as mobile phones, PDAs and smart cards. ECC technology is ready for deployment as, in addition to its technical merits, standards have been put in place and reference implementations have been made available. Sev eral

RSA ECC Processor

Embed Size (px)

Citation preview

Page 1: RSA ECC Processor

8/11/2019 RSA ECC Processor

http://slidepdf.com/reader/full/rsa-ecc-processor 1/13

Page 2: RSA ECC Processor

8/11/2019 RSA ECC Processor

http://slidepdf.com/reader/full/rsa-ecc-processor 2/13

Page 3: RSA ECC Processor

8/11/2019 RSA ECC Processor

http://slidepdf.com/reader/full/rsa-ecc-processor 3/13

Page 4: RSA ECC Processor

8/11/2019 RSA ECC Processor

http://slidepdf.com/reader/full/rsa-ecc-processor 4/13

Page 5: RSA ECC Processor

8/11/2019 RSA ECC Processor

http://slidepdf.com/reader/full/rsa-ecc-processor 5/13

Page 6: RSA ECC Processor

8/11/2019 RSA ECC Processor

http://slidepdf.com/reader/full/rsa-ecc-processor 6/13

Page 7: RSA ECC Processor

8/11/2019 RSA ECC Processor

http://slidepdf.com/reader/full/rsa-ecc-processor 7/13

Page 8: RSA ECC Processor

8/11/2019 RSA ECC Processor

http://slidepdf.com/reader/full/rsa-ecc-processor 8/13

Page 9: RSA ECC Processor

8/11/2019 RSA ECC Processor

http://slidepdf.com/reader/full/rsa-ecc-processor 9/13

Page 10: RSA ECC Processor

8/11/2019 RSA ECC Processor

http://slidepdf.com/reader/full/rsa-ecc-processor 10/13

Page 11: RSA ECC Processor

8/11/2019 RSA ECC Processor

http://slidepdf.com/reader/full/rsa-ecc-processor 11/13

Page 12: RSA ECC Processor

8/11/2019 RSA ECC Processor

http://slidepdf.com/reader/full/rsa-ecc-processor 12/13

Page 13: RSA ECC Processor

8/11/2019 RSA ECC Processor

http://slidepdf.com/reader/full/rsa-ecc-processor 13/13


Criptografia de chave pú novos modelos baseados em ...marco/cursos/ia012_14_1/slides/tutorial... · • Exemplos: RSA e Elliptic Curve Cryptography (ECC). 5 Criptografia Simétrica

Criptografia de chave pú novos modelos baseados em ...marco/cursos/ia012_14_1/slides/tutorial... · • Exemplos: RSA e Elliptic Curve Cryptography (ECC). 5 Criptografia Simétrica

Documents
POS TERMINALS AND NFC - themobileknowledge.com€¦ · LTC Engine (RSA, ECC, 3DES,ECC,SHA, DPA) Crypto Engine SPI/ UART Host interface External Memory NOR, NAND, DDRx Thermal RTC

POS TERMINALS AND NFC - themobileknowledge.com€¦ · LTC Engine (RSA, ECC, 3DES,ECC,SHA, DPA) Crypto Engine SPI/ UART Host interface External Memory NOR, NAND, DDRx Thermal RTC

Documents
AHardware-AcceleratedECDLPwithHigh-Performance ... · other public key cryptosystems, such as RSA. The security of ECC relies on the difficulty of elliptic curve discrete logarithmic

AHardware-AcceleratedECDLPwithHigh-Performance ... · other public key cryptosystems, such as RSA. The security of ECC relies on the difficulty of elliptic curve discrete logarithmic

Documents
RSA and ECC Thesis.pdf

RSA and ECC Thesis.pdf

Documents
Lessons Learned from High-Speed Implementa6on and ... · (RSA, ECC, Diffie-Hellman) ... • Consortium for Efficient Embedded Security, Efficient Embedded Security Standards (EESS),

Lessons Learned from High-Speed Implementa6on and ... · (RSA, ECC, Diffie-Hellman) ... • Consortium for Efficient Embedded Security, Efficient Embedded Security Standards (EESS),

Documents
Ministry of Public Healthodpc9.ddc.moph.go.th/DPC5/store_201.pdf2558 3. 1 (51m 120,000) 3.1 (Processor) Xeon 6 core (Clock speed) 2.0 GHz 1 Processor 3.2 64 bit Cache 15 MB 3.3 ECC

Ministry of Public Healthodpc9.ddc.moph.go.th/DPC5/store_201.pdf2558 3. 1 (51m 120,000) 3.1 (Processor) Xeon 6 core (Clock speed) 2.0 GHz 1 Processor 3.2 64 bit Cache 15 MB 3.3 ECC

Documents
RSA BSAFE Crypto-C ME 3.0.0.1 Security Policy · RSA (Cert. #905), DSA (Cert. #566), Diffie-Hellman, ECC ... 8 RSA BSAFE Crypto-C ME 3.0.0.1 Security Policy 2.4.2 Key Storage Crypto-C

RSA BSAFE Crypto-C ME 3.0.0.1 Security Policy · RSA (Cert. #905), DSA (Cert. #566), Diffie-Hellman, ECC ... 8 RSA BSAFE Crypto-C ME 3.0.0.1 Security Policy 2.4.2 Key Storage Crypto-C

Documents
Secure Color Visual Secret Sharing Scheme Using Shifting ... 3/Vol3Issue2/ijcsit20120302104.pdfStandard),DES(Data Encryption Standard),ECC (Elliptic Curve Cryptography),RSA (RSA) they

Secure Color Visual Secret Sharing Scheme Using Shifting ... 3/Vol3Issue2/ijcsit20120302104.pdfStandard),DES(Data Encryption Standard),ECC (Elliptic Curve Cryptography),RSA (RSA) they

Documents
Dell Precision 3930 Rack · NOTE: ECC memory is only supported with Xeon E Processor and Core i3 Processor SKUs. Type DDR4 UDIMM Non-ECC / ECC memory Speed 2666 MHz Precision 3930

Dell Precision 3930 Rack · NOTE: ECC memory is only supported with Xeon E Processor and Core i3 Processor SKUs. Type DDR4 UDIMM Non-ECC / ECC memory Speed 2666 MHz Precision 3930

Documents
Design of RSA Processor and Field Arithmetic of …...Design of RSA Processor and Field Arithmetic of ECC with Vedic Multipliers for Nodes in Wireless .. DOI: 10.9790/4200-0801010115

Design of RSA Processor and Field Arithmetic of …...Design of RSA Processor and Field Arithmetic of ECC with Vedic Multipliers for Nodes in Wireless .. DOI: 10.9790/4200-0801010115

Documents
ESP32 Datasheet · – AES – Hash(SHA-2) – RSA EspressifSystems 3 ESP32DatasheetV2.1. 1. OVERVIEW – ECC – RandomNumberGenerator(RNG) 1.5 Applications • Genericlow-powerIoTsensorhub

ESP32 Datasheet · – AES – Hash(SHA-2) – RSA EspressifSystems 3 ESP32DatasheetV2.1. 1. OVERVIEW – ECC – RandomNumberGenerator(RNG) 1.5 Applications • Genericlow-powerIoTsensorhub

Documents
Parametry system w klucza publicznegofluid.ippt.gov.pl/seminar/text/Chmielowiec2010.pdf · Spistreści Wprowadzenie RSA ECC Podsumowanie Algorytmykluczapublicznego Zastosowaniaalgorytmówkluczapublicznego

Parametry system w klucza publicznegofluid.ippt.gov.pl/seminar/text/Chmielowiec2010.pdf · Spistreści Wprowadzenie RSA ECC Podsumowanie Algorytmykluczapublicznego Zastosowaniaalgorytmówkluczapublicznego

Documents
Computational Requirements of PKCkoclab.cs.ucsb.edu/teaching/cren/docx/c01creq.pdfComputational Requirements of PKC RSA, ECC, DH, ElGamal, DSA, Protocols Computational Requirements

Computational Requirements of PKCkoclab.cs.ucsb.edu/teaching/cren/docx/c01creq.pdfComputational Requirements of PKC RSA, ECC, DH, ElGamal, DSA, Protocols Computational Requirements

Documents
Asymmetric Crypto-Processor Core - UCLAcadlab.cs.ucla.edu/icsoc/protected-dir/june_pdf_presentations/cheng... · RSA Asymmetric Algorithm • The relation between ciphertext and a

Asymmetric Crypto-Processor Core - UCLAcadlab.cs.ucla.edu/icsoc/protected-dir/june_pdf_presentations/cheng... · RSA Asymmetric Algorithm • The relation between ciphertext and a

Documents
Chapter 8 Simulation of Protocols - INFLIBNETshodhganga.inflibnet.ac.in/bitstream/10603/20850/17/17_chapter 8.pdfChapter 8 Simulation of Protocols 8.1. ... RSA-DPAP, ECC-DPAP, PVDSSP

Chapter 8 Simulation of Protocols - INFLIBNETshodhganga.inflibnet.ac.in/bitstream/10603/20850/17/17_chapter 8.pdfChapter 8 Simulation of Protocols 8.1. ... RSA-DPAP, ECC-DPAP, PVDSSP

Documents
Keeping Cars Secure: Solutions for Implementing Security ... · PDF fileAES RSA ECC Secret 128 3072 256 Top Secret 192 7680 384 256 15360 512 . TM 17 DES AES RSA ECC Secure for the

Keeping Cars Secure: Solutions for Implementing Security ... · PDF fileAES RSA ECC Secret 128 3072 256 Top Secret 192 7680 384 256 15360 512 . TM 17 DES AES RSA ECC Secure for the

Documents
Z40.18T GPU Server - starline Computer...Model Zealbox Z40.18T GPU Processor 2 x Intel Xeon E5-2600 v4 series Mainboard Supermicro X10 Dual-CPU RAM (ECC) up to 2 TB DDR4 ECC RAM PCIe

Z40.18T GPU Server - starline Computer...Model Zealbox Z40.18T GPU Processor 2 x Intel Xeon E5-2600 v4 series Mainboard Supermicro X10 Dual-CPU RAM (ECC) up to 2 TB DDR4 ECC RAM PCIe

Documents
RSA vs. ECC - Freie Universitätpage.mi.fu-berlin.de/rhschulz/Krypto/RSA_or_ECC.pdf · millions of RSA-keys. ... To test the security of 'semiprimes', the RSA-Factoring-Challenge,

RSA vs. ECC - Freie Universitätpage.mi.fu-berlin.de/rhschulz/Krypto/RSA_or_ECC.pdf · millions of RSA-keys. ... To test the security of 'semiprimes', the RSA-Factoring-Challenge,

Documents
Optimization of Public Key Cryptography (RSA and ECC) for ... · Optimization of Public Key Cryptography (RSA and ECC) for 16-bits Devices based on 6LoWPAN Jesús Ayuso, Leandro Marin,

Optimization of Public Key Cryptography (RSA and ECC) for ... · Optimization of Public Key Cryptography (RSA and ECC) for 16-bits Devices based on 6LoWPAN Jesús Ayuso, Leandro Marin,

Documents
IJIRAE::VHDL Implementation of ECC Processor over GF (2^163)

IJIRAE::VHDL Implementation of ECC Processor over GF (2^163)

Documents
Pizza Roulette - OWASP SNI 2 RSA 2048 RSA 2048 RSA 2048 RSA 2048 RSA 2048 RSA 2048 RSA 2048 RSA 2048 RSA 2048 RSA 2048 RSA 2048 RSA 2048 RSA 2048 RSA 2048 RSA 2048 RSA 2048 RSA 2048

Pizza Roulette - OWASP SNI 2 RSA 2048 RSA 2048 RSA 2048 RSA 2048 RSA 2048 RSA 2048 RSA 2048 RSA 2048 RSA 2048 RSA 2048 RSA 2048 RSA 2048 RSA 2048 RSA 2048 RSA 2048 RSA 2048 RSA 2048

Documents
FPGA Based Crypto Processor for Elliptic Curve …...Elliptic Curve Cryptography (ECC) is proposed by Neal Koblitz [1] and Victor Miller [2] in 1985. ECC has been commercially accepted

FPGA Based Crypto Processor for Elliptic Curve …...Elliptic Curve Cryptography (ECC) is proposed by Neal Koblitz [1] and Victor Miller [2] in 1985. ECC has been commercially accepted

Documents
Elliptic Curve Cryptographyrjchen/Crypto2017/11_ECC.pdfElliptic Curves 23 Cryptanalysis Lab Security of ECC versus RSA/ElGamal Elliptic curve cryptosystems give the most security per

Elliptic Curve Cryptographyrjchen/Crypto2017/11_ECC.pdfElliptic Curves 23 Cryptanalysis Lab Security of ECC versus RSA/ElGamal Elliptic curve cryptosystems give the most security per

Documents
5th Generation Intel® Core™ Processor · Introduction 5th Generation Intel® Core™ Processor Family with ECC for Mobile Platform – Lava Canyon 2 CRB May 2016 User Guide Document

5th Generation Intel® Core™ Processor · Introduction 5th Generation Intel® Core™ Processor Family with ECC for Mobile Platform – Lava Canyon 2 CRB May 2016 User Guide Document

Documents
Security Analysis of Medical Images using ECC over RSA

Security Analysis of Medical Images using ECC over RSA

Documents
Elliptic Curve Cryptographycse.iitkgp.ac.in/~debdeep/pres/TI/ecc.pdf · • Elliptic curve cryptography [ECC] is a public-key cryptosystem just like RSA, Rabin, and El Gamal. •

Elliptic Curve Cryptographycse.iitkgp.ac.in/~debdeep/pres/TI/ecc.pdf · • Elliptic curve cryptography [ECC] is a public-key cryptosystem just like RSA, Rabin, and El Gamal. •

Documents
The 6th ACM ASIA Public-Key Cryptography Workshop (APKC ...schemes based on ECC in rank metric and made them run on an Arm Cortex-M0 processor, the smallest Arm processor available

The 6th ACM ASIA Public-Key Cryptography Workshop (APKC ...schemes based on ECC in rank metric and made them run on an Arm Cortex-M0 processor, the smallest Arm processor available

Documents
CESEL: Flexible Crypto Acceleration Talks/2018/Kiningham.pdfCrypto Background Symmetric Ciphers AES, DES, … Hash Functions SHA, BLAKE, … Asymmetric Ciphers RSA, ECC, … • Based

CESEL: Flexible Crypto Acceleration Talks/2018/Kiningham.pdfCrypto Background Symmetric Ciphers AES, DES, … Hash Functions SHA, BLAKE, … Asymmetric Ciphers RSA, ECC, … • Based

Documents
l’evoluzione progettisti, i tecnici ed i gestori della ... · Sportivi, Rsa, Biblioteche, Scuole ecc... Obiettivo della fiera è offrire ... grado di autosostenersi producendo energia

l’evoluzione progettisti, i tecnici ed i gestori della ... · Sportivi, Rsa, Biblioteche, Scuole ecc... Obiettivo della fiera è offrire ... grado di autosostenersi producendo energia

Documents
ISSA Las Vegaslvissa.org/StudentsFall2017/Cryptography.pdf · Cryptography (ECC) over the Rivest, Shamir, and Adleman (RSA) algorithm is its improved efficiency and requirement of

ISSA Las Vegaslvissa.org/StudentsFall2017/Cryptography.pdf · Cryptography (ECC) over the Rivest, Shamir, and Adleman (RSA) algorithm is its improved efficiency and requirement of

Documents