Search papers, labs, and topics across Lattice.
This paper introduces MPX, a dual-mode systolic array designed to efficiently handle both matrix and polynomial multiplication, addressing the limitations of existing cryptographic accelerators. By aligning the wavefront dataflow of systolic arrays with the accumulation patterns of polynomial multiplication, the authors demonstrate that MPX can be integrated with minimal additional area and power costs. Experimental results reveal that MPX achieves over 1.2x lower latency for polynomial multiplication compared to traditional NTT-based methods on systolic matrix engines, highlighting its effectiveness in cryptographic applications.
MPX slashes polynomial multiplication latency by over 1.2x while seamlessly integrating with existing matrix multiplication hardware.
Polynomial multiplication is a fundamental kernel in Fully Homomorphic Encryption (FHE) and post-quantum cryptography (PQC) and is commonly accelerated through Number Theoretic Transforms (NTTs). To avoid the cost of designing dedicated cryptographic accelerators, recent efforts have mapped NTT computations onto existing systolic matrix engines, enabling the reuse of AI hardware for cryptographic workloads. In this work, we take the opposite approach. We observe that the wavefront dataflow of systolic arrays naturally aligns with the accumulation pattern of polynomial multiplication and leverage this correspondence to design MPX, a dual-mode systolic array that supports both matrix multiplication and direct polynomial multiplication within the same hardware fabric. Experimental results show that extending a conventional systolic array with this dual-mode capability requires only 20% additional area and introduces negligible power overhead during matrix-multiplication execution. In polynomial-multiplication mode, MPX achieves more than 1.2x lower latency compared to NTT-based polynomial multiplication on systolic matrix engines.
