<p>The rapid growth of the Internet of Things (IoT) emphasizes the need for secure data transmission between IoT devices and edge computing. Many IoT systems utilize <i>asymmetric cryptography</i>, particularly elliptic curve cryptography (ECC), which is favored in resource-constrained environments for its efficient encryption and smaller key sizes. ECC-based protocols and Diffie-Hellman (DH) key agreement schemes are integral to edge computing.<Emphasis Type="BoldItalic">WolfSSL</Emphasis> is an efficient SSL library with a significantly smaller memory footprint, optimized for IoT and embedded systems, and supports ECC and DH public key options for over 2 billion devices daily. This study evaluates processor extensions and instruction customization within WolfSSL’s benchmark code to enhance ECC and DH performance. We dissect the implementation into key routines such as Montgomery reduction and multiplication, recommending processor hardware extensions and software modifications to improve computational speed. Our analysis covers various processor designs, from single-issue base processors to multi-issue configurations with custom instructions, revealing performance trade-offs. Our results indicate that our designs outperform the most optimized WolfSSL software implementations on base RISC processors, achieving speedups of up to <InlineEquation ID="IEq1"> <EquationSource Format="TEX">\(\{6.25x, 4.2x\}\)</EquationSource> <EquationSource Format="MATHML"><math> <mrow> <mo stretchy="false">{</mo> <mn>6.25</mn> <mi>x</mi> <mo>,</mo> <mn>4.2</mn> <mi>x</mi> <mo stretchy="false">}</mo> </mrow> </math></EquationSource> </InlineEquation> for ECC and <InlineEquation ID="IEq2"> <EquationSource Format="TEX">\(\{5.6x, 3.9x\}\)</EquationSource> <EquationSource Format="MATHML"><math> <mrow> <mo stretchy="false">{</mo> <mn>5.6</mn> <mi>x</mi> <mo>,</mo> <mn>3.9</mn> <mi>x</mi> <mo stretchy="false">}</mo> </mrow> </math></EquationSource> </InlineEquation> for DH algorithms. Moreover, comparing our work to architectures like ARM6/8 and RISC-V platforms shows significant performance improvements. These advancements not only enhance ECC and DH operations but also benefit various Post-Quantum Cryptography (PQC) primitives. Our findings achieve significant speed improvements for Montgomery reduction and point multiplication while maintaining minimal area cost, making them advantageous for applications using lattice-based and code-based PQC algorithms.</p>

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

A fresh look on slow asymmetric crypto: accelerating WolfSSL on end-nodes processors

  • Oren Ganon,
  • Yuval Rubakh,
  • Nadav Elkayam,
  • Itamar Levi

摘要

The rapid growth of the Internet of Things (IoT) emphasizes the need for secure data transmission between IoT devices and edge computing. Many IoT systems utilize asymmetric cryptography, particularly elliptic curve cryptography (ECC), which is favored in resource-constrained environments for its efficient encryption and smaller key sizes. ECC-based protocols and Diffie-Hellman (DH) key agreement schemes are integral to edge computing.WolfSSL is an efficient SSL library with a significantly smaller memory footprint, optimized for IoT and embedded systems, and supports ECC and DH public key options for over 2 billion devices daily. This study evaluates processor extensions and instruction customization within WolfSSL’s benchmark code to enhance ECC and DH performance. We dissect the implementation into key routines such as Montgomery reduction and multiplication, recommending processor hardware extensions and software modifications to improve computational speed. Our analysis covers various processor designs, from single-issue base processors to multi-issue configurations with custom instructions, revealing performance trade-offs. Our results indicate that our designs outperform the most optimized WolfSSL software implementations on base RISC processors, achieving speedups of up to \(\{6.25x, 4.2x\}\) { 6.25 x , 4.2 x } for ECC and \(\{5.6x, 3.9x\}\) { 5.6 x , 3.9 x } for DH algorithms. Moreover, comparing our work to architectures like ARM6/8 and RISC-V platforms shows significant performance improvements. These advancements not only enhance ECC and DH operations but also benefit various Post-Quantum Cryptography (PQC) primitives. Our findings achieve significant speed improvements for Montgomery reduction and point multiplication while maintaining minimal area cost, making them advantageous for applications using lattice-based and code-based PQC algorithms.