Search papers, labs, and topics across Lattice.
This paper introduces Hermes, a unified hardware architecture for Number Theoretic Transform (NTT) acceleration, designed to address the performance bottleneck in Fully Homomorphic Encryption (FHE) and support Hybrid Homomorphic Encryption (HHE) with varying NTT lengths. Hermes employs a hybrid dataflow approach to maximize parallelism in both temporal and spatial dimensions, using a fully pipelined on-chip computing core and a conflict-free on-chip fragmentation algorithm for efficient HBM access. Experimental results demonstrate that Hermes achieves significant throughput improvements, outperforming state-of-the-art GPU and FPGA accelerators by up to 13.6x and 1.3x, respectively.
Forget slow NTTs: Hermes' hybrid dataflow architecture delivers up to 13.6x faster throughput for homomorphic encryption than GPUs.
Fully Homomorphic Encryption (FHE) relies heavily on the Number Theoretic Transform (NTT), making NTT a major performance bottleneck due to its intensive polynomial computations. Hybrid Homomorphic Encryption (HHE), which integrates arithmetic and logic FHE, further requires support for multiple NTT lengths. However, existing accelerators mainly optimize NTT throughput and do not provide unified support for HHE. This paper presents Hermes, a unified high-performance NTT architecture based on hybrid dataflow. Hermes exploits parallelism along both temporal and spatial dimensions and incorporates a fully pipelined on-chip computing core. A conflict-free on-chip fragmentation algorithm is introduced to resolve bank conflicts and enable burst HBM access, while an efficient dataflow improves computational intensity through data reuse, reducing bandwidth demand. Experimental results show that Hermes supports multiple NTT lengths and achieves up to 13.6x and 1.3x higher throughput than state-of-the-art GPU and FPGA accelerators, respectively. Our source code is available at https://anonymous.4open.science/r/Hermes_conf-4E6F.
