RISE: RISC-V SoC for En/Decryption Acceleration on the Edge for Homomorphic Encryption

被引:8
作者
Azad, Zahra [1 ]
Yang, Guowei [1 ]
Agrawal, Rashmi [1 ]
Petrisko, Daniel [2 ]
Taylor, Michael [2 ]
Joshi, Ajay [1 ]
机构
[1] Boston Univ, Dept Elect & Comp Engn ECE, Boston, MA 02215 USA
[2] Univ Washington, Paul G Allen Sch Comp Sci & Engn CSE, Seattle, WA 98195 USA
关键词
~Cheon-Kim-Kim-Song (CKKS) scheme; edge-side operations; hardware acceleration; homomorphic encryption (HE); privacy-preserving computing; RISC-V; PERFORMANCE; PROCESSOR; MULTICORE; DESIGN;
D O I
10.1109/TVLSI.2023.3288754
中图分类号
TP3 [计算技术、计算机技术];
学科分类号
0812 ;
摘要
Today, edge devices commonly connect to the cloud to use its storage and computing capabilities. This leads to security and privacy concerns about user data. Homomorphic encryption (HE) is a promising solution to address the data privacy problem as it allows arbitrarily complex computations on encrypted data without ever needing to decrypt it. While there has been a lot of work on accelerating HE computations in the cloud, small attention has been paid to the message-to-ciphertext and ciphertext-to-message conversion operations on the edge. In this work, we profile the edge-side conversion operations, and our analysis shows that during conversion error sampling, encryption and decryption operations are the bottlenecks. To overcome these bottlenecks, we present RISE, an area and energy-efficient RISC-V system-on-chip (SoC). RISE leverages an efficient and lightweight pseudorandom number generator (PRNG) core and combines it with fast sampling techniques to accelerate the error sampling operations. To accelerate the encryption and decryption operations, RISE uses scalable data-level parallelism to implement the number theoretic transform (NTT) operation, the main bottleneck within the encryption and decryption operations. In addition, RISE saves area by implementing a unified en/decryption datapath, and efficiently exploits techniques like memory reuse and data reordering to utilize a minimal amount of ON-chip memory. We evaluate RISE using a complete RTL design containing a RISC-V processor interfaced with our accelerator. Our analysis reveals that for message-to-ciphertext and ciphertext-to-message conversions, using RISE leads up to 5986.99x and 1164.1x more energy-efficient solution, respectively, than when using just the RISC-V processor.
引用
收藏
页码:1523 / 1536
页数:14
相关论文
共 44 条
[1]  
Agrawal R, 2020, PROCEEDINGS OF THE 2020 IEEE INTERNATIONAL SYMPOSIUM ON HARDWARE ORIENTED SECURITY AND TRUST (HOST), P295, DOI [10.1109/HOST45689.2020.9300275, 10.1109/host45689.2020.9300275]
[2]   Multi-GPU Design and Performance Evaluation of Homomorphic Encryption on GPU Clusters [J].
Al Badawi, Ahmad ;
Veeravalli, Bharadwaj ;
Lin, Jie ;
Xiao, Nan ;
Kazuaki, Matsumura ;
Khin Mi Mi, Aung .
IEEE TRANSACTIONS ON PARALLEL AND DISTRIBUTED SYSTEMS, 2021, 32 (02) :379-391
[3]  
Albrecht M, 2021, Protecting privacy through homomorphic encryption, P31, DOI DOI 10.1007/978-3-030-77287-1_2
[4]  
Alkim E, 2016, PROCEEDINGS OF THE 25TH USENIX SECURITY SYMPOSIUM, P327
[5]  
[Anonymous], 2020, Microsoft SEAL
[6]  
Azad Z., 2022, Proceedings of the ACM/IEEE International Symposium on Low Power Electronics and Design, P1
[7]  
Banerjee U., 2019, ARXIV
[8]  
BARRETT P, 1987, LECT NOTES COMPUT SC, V263, P311
[9]  
Bernstein DJ, 2008, CONTEMP MATH, V461, P1
[10]   Efficiently Processing Complex-Valued Data in Homomorphic Encryption [J].
Bootland, Carl ;
Castryck, Wouter ;
Iliashenko, Ilia ;
Vercauteren, Frederik .
JOURNAL OF MATHEMATICAL CRYPTOLOGY, 2020, 14 (01) :55-65