Flexible NTT/iNTT Accelerator Based on Montgomery Reduction

Jinyeol Kim, Jinyoung Shin, Seongmo An, Chaebin Lee, Dayoung Lee, Seung Eun Lee

Research output: Chapter in Book/Report/Conference proceedingConference contributionpeer-review

Abstract

As the importance of data grows, so does the significance of homomorphic encryption(HE), which enables direct computations on encrypted data. However, HE presents a major challenge, with computational overhead increasing compared to plaintext operations. To address this, we developed a hardware accelerator for NTT and iNTT, which are commonly used in HE and contribute to this overhead. The accelerator implements modular arithmetic using Montgomery reduction, and pipelining is applied to improve throughput. Additionally, a mode-switching feature is introduced, allowing both NTT and iNTT operations to be performed on a single circuit. The accelerator is also designed to operate flexibly across various cryptographic strength parameters (N-values). The proposed accelerator achieved an average speedup of approximately 4.24 times compared to software, demonstrating its effectiveness in reducing computation time in HE systems.

Original languageEnglish
Title of host publication2025 IEEE International Conference on Consumer Electronics, ICCE 2025
PublisherInstitute of Electrical and Electronics Engineers Inc.
ISBN (Electronic)9798331521165
DOIs
StatePublished - 2025
Event2025 IEEE International Conference on Consumer Electronics, ICCE 2025 - Las Vegas, United States
Duration: 11 Jan 202514 Jan 2025

Publication series

NameDigest of Technical Papers - IEEE International Conference on Consumer Electronics
ISSN (Print)0747-668X
ISSN (Electronic)2159-1423

Conference

Conference2025 IEEE International Conference on Consumer Electronics, ICCE 2025
Country/TerritoryUnited States
CityLas Vegas
Period11/01/2514/01/25

Keywords

  • homomorphic encryption(HE)
  • number theoretic transform(NTT)
  • pipelining

Fingerprint

Dive into the research topics of 'Flexible NTT/iNTT Accelerator Based on Montgomery Reduction'. Together they form a unique fingerprint.

Cite this