17th IEEE Symposium on Computer Arithmetic (ARITH'05)
DOI: 10.1109/arith.2005.21
|View full text |Cite
|
Sign up to set email alerts
|

Fast Modular Reduction for Large Wordlengths via One Linear and One Cyclic Convolution

Abstract: Abstract-Modular reduction is a fundamental operation in cryptographic systems. Most well known modular reduction methods including Barrett's and Montgomery's algorithms leverage some-pre computations to avoid divisions so that the main complexity of these methods lies in a sequence of two long multiplications. For large wordlengths a multiplication which is tantamount to a linear convolution is performed via the Fast Fourier Transform (FFT) or other transform-based techniques as in the Schonhage-Strassen mult… Show more

Help me understand this report

Search citation statements

Order By: Relevance

Paper Sections

Select...
1
1
1

Citation Types

0
3
0

Publication Types

Select...
3
2
1

Relationship

0
6

Authors

Journals

citations
Cited by 8 publications
(3 citation statements)
references
References 14 publications
0
3
0
Order By: Relevance
“…Note that the linear convolution (2) is slightly different to the cyclic convolution (6). In order to make the cyclic convolution equivalent to the linear convolution, s should satisfy s ≤ d/2.…”
Section: Algorithm 1 Montgomery Modular Multiplication Without Conditmentioning
confidence: 99%
“…Note that the linear convolution (2) is slightly different to the cyclic convolution (6). In order to make the cyclic convolution equivalent to the linear convolution, s should satisfy s ≤ d/2.…”
Section: Algorithm 1 Montgomery Modular Multiplication Without Conditmentioning
confidence: 99%
“…Given M = A × B and R = M (mod N), the calculation of both arithmetic operations is described in Algorithms 4 and 5. More details about FFT, inverse FFT functions and Barrett modular reduction can be found in [4,10].…”
Section: Algorithm 3: Proposed Algorithmmentioning
confidence: 99%
“…As such, multiplication modulo Mersenne numbers is approximately twice as fast as multiplication of integers of the same bitlength, for which a linear convolution is required, as each multiplicand must be padded with k zeros before a cyclic convolution of length 2k can be performed. For Montgomery multiplication at asymptotic bitlengths, the reduction step can be made 25% cheaper, again by using a cyclic rather than a linear convolution for one of the required multiplications [53]. However, since the multiplication step is oblivious to the form of the modulus, it seems unlikely to possess the same efficiency benefits that the Mersenne numbers enjoy.…”
Section: Introductionmentioning
confidence: 99%