Peregrino: A Full-Hardware Accelerator for the Complete Falcon Post-Quantum Digital Signature Scheme on Resource-Constrained Edge Devices
Peregrino is a full HDL Falcon accelerator that fits NIST Falcon-1024 on one Artix-7 FPGA.
Peregrino is a from-scratch HDL accelerator for the complete NIST Falcon post-quantum signature scheme, using emulated floating-point arithmetic for edge devices without a native FPU. On one Artix-7 XC7A200T, Falcon-1024 uses 85,261 LUTs, 41,382 flip-flops, 44 BRAMs, and 142 DSPs. Versus the HLS-based FalconTakesOff design, it uses 1.9 times fewer LUTs, 3.4 times fewer flip-flops, 2.7 times fewer BRAMs, and 9.9 times fewer DSPs, fitting one FPGA instead of at least two. As a MicroBlaze peripheral, it reduces key generation, signing, and verification cycles by 92%, 96%, and 85% against emulated-float reference software.
- Complete Falcon signature scheme implemented from scratch in HDL.
- Falcon-1024 uses 85261 LUTs and 142 DSPs on one Artix-7.
- Resource use is 1.9 to 9.9 times lower than the HLS design.
- Signing cycles drop 96 percent versus emulated floating-point software.
Full article228 words · extracted from arxiv.org · click to collapse
The arrival of quantum computers threatens the security guarantees of classical cryptography, since quantum algorithms can break schemes that remain secure against conventional attacks. The National Institute of Standards and Technology (NIST) has therefore standardized a set of post-quantum cryptographic algorithms, among them Falcon, a lattice-based digital signature scheme with the most compact signature and public-key sizes of the standardized candidates. Falcon's reliance on floating-point arithmetic makes it hard to implement in hardware, and prior work offers only partial accelerators for specific operations such as signature generation or verification, or a single full implementation generated through high-level synthesis (HLS). This work presents Peregrino, the first hardware accelerator of the complete Falcon digital signature scheme designed from scratch in HDL, targeting resource-constrained edge devices without a native floating-point unit through an emulated floating-point datapath. Implemented on a single Artix 7 XC7A200T FPGA, Peregrino uses 85261 LUTs, 41382 FFs, 44 BRAMs, and 142 DSPs for the Falcon-1024 variant. Against the only prior full implementation, the HLS-based FalconTakesOff, it uses 1,9$\times$ fewer LUTs, 3,4$\times$ fewer FFs, 2,7$\times$ fewer BRAMs, and 9,9$\times$ fewer DSPs, fitting the entire scheme on one FPGA where the HLS design requires at least two. Operating as a peripheral of an on-chip MicroBlaze soft-core, the accelerator additionally reduces key-pair generation, signature generation, and signature verification clock cycles by 92\%, 96\%, and 85\% over the emulated floating-point reference software.
Text extracted automatically; images, tables and formatting may be missing. Original: https://arxiv.org/abs/2609.31252