Search papers, labs, and topics across Lattice.
This paper presents a GPU-accelerated Key Encapsulation Mechanism (KEM) based on the Learning with Errors (LWE) problem, a cornerstone of Post-Quantum Cryptography (PQC). By utilizing OpenACC, the authors achieve significant performance improvements, reporting up to a 208脳 speedup on the NVIDIA Grace Hopper Superchip compared to a multithreaded CPU baseline. The findings demonstrate not only enhanced computational efficiency but also improved energy consumption, with approximately 2脳 better efficiency on the Superchip compared to traditional CPU architectures.
Achieving a staggering 208脳 speedup in LWE-based cryptographic workloads could redefine the feasibility of post-quantum cryptography implementations.
Shor's algorithm proved that asymmetric cryptographic protocols based on the integer factorization and discrete logarithm problems are no longer safe in a world with large-scale quantum computers. As a result, Post-Quantum Cryptography (PQC) has been developed over the last few years, seeking cryptographic primitives resistant to quantum attacks. One of the main hard problems underlying PQC schemes is the Learning with Errors (LWE) problem, which is significantly more computationally intensive than its classical predecessors. In this work, we present a Key Encapsulation Mechanism (KEM) based on plain LWE and develop a GPU-oriented implementation using OpenACC. We evaluate the performance of our accelerated application in terms of both time-to-solution and energy-to-solution, considering bare-metal and containerized executions across multiple NVIDIA GPU models and generations. Our implementation achieves significant acceleration across all tested GPU platforms. In particular, on the NVIDIA Grace Hopper Superchip, it attains up to a $208\times$ speedup over a multithreaded CPU baseline and enables the execution of problem sizes that are impractical on CPU architectures due to memory and synchronization constraints. Energy consumption analysis also shows $\approx 2\times$ better efficiency when using the Superchip compared to systems equipped with x86-based CPUs and NVIDIA H100 GPUs. These results highlight the effectiveness of GPU acceleration for computationally demanding LWE-based cryptographic workloads.
