A workload characterization of elliptic curve cryptography methods in embedded environments

ABSTRACT

Elliptic Curve Cryptography (ECC) is emerging as an attractive public-key system for constrained environments, because of the small key sizes and computational efficiency, while preserving the same security level as the standard methodsWe have developed a set of benchmarks to compare standard and corresponding elliptic curve public-key methods. An embedded device based on the Intel XScale architecture, which utilizes an ARM processor core was modeled and used for studying the benchmark performance. Different possible variations for the memory hierarchy of such basic architecture were considered. We compared our benchmarks with MiBench/Security, another widely accepted benchmark set, to provide a reference for our evaluation.We studied operations and impact on memory of Diffie-Hellman key exchange, digital signature algorithm, ElGamal, and RSA public-key cryptosystems. Elliptic curve cryptosystems are more efficient in terms of execution time, but their impact on memory subsystem has to be taken into account when designing embedded devices in order to achieve better performance.

REFERENCES

• 1: Todd Austin , Eric Larson , Dan Ernst, SimpleScalar: An Infrastructure for Computer System Modeling, Computer, v.35 n.2, p.59-67, February 2002 [doi>10.1109/2.982917]
• 2: {Blake03} V. Gupta, S. Blake-Wilson, B. Moeller, C. Hawk, "ECC Cipher Suites for TLS", Internet draft, June 2003, http://www.ietf.org/internet-drafts/draft-ietf-tls-ecc-03.txt.
• 3: {Diffie76} W. Diffie, M. E. Hellman, "New Directions in Cryptography", IEEE Trans. on Information Theory, Vol. IT-22, Nov. 1976, pp. 644--654.
• 4: {ElGamal85} T. ElGamal, "A public key cryptosystem and a signature scheme based on discrete logarithms", IEEE Trans. on Information Theory, Vol. 31, 1985, pp. 469--472.
• 5: {Fiskiran02} A. M. Fiskiran, R. B. Lee, "Workload Characterization of Elliptic Curve Cryptography and other Network Security Algorithms for Constrained Environments", Proc. of 5th IEEE Workshop on Workload Characterization (WWC-5), Nov. 2002, pp. 127--137.
• 6: Vipul Gupta , Sumit Gupta , Sheueling Chang , Douglas Stebila, Performance analysis of elliptic curve cryptography for SSL, Proceedings of the 3rd ACM workshop on Wireless security, p.87-94, September 28-28, 2002, Atlanta, GA, USA [doi>10.1145/570681.570691]
• 7: {Guthaus01} M. Guthaus, J. Ringerberg, T. Austin, T. Mudge, R. Brown, "MiBench: A free, commercially representative embedded benchmark suite", Proc. of 4th Workshop on Workload Characterization, Dec. 2001.
• 8: Darrel Hankerson , Julio López Hernandez , Alfred Menezes, Software Implementation of Elliptic Curve Cryptography over Binary Fields, Proceedings of the Second International Workshop on Cryptographic Hardware and Embedded Systems, p.1-24, August 17-18, 2000
• 9: {IEEE1363-00} IEEE Standard Specifications for Public-Key Cryptography, 1363--2000, IEEE Computer Society, Jan. 2000, http://grouper.ieee.org/groups/1363/
• 10: {Intel03} Intel Corporation, "The Intel Xscale Microarchitecture Technical Summary", ftp://download.intel.com/design/intelxscale/XscaleDatasheet4.pdf
• 11: Richard Eugene Kessler, Analysis of multi-megabyte secondary CPU cache memories, University of Wisconsin at Madison, Madison, WI, 1992
• 12: Donald E. Knuth, The art of computer programming, volume 2 (3rd ed.): seminumerical algorithms, Addison-Wesley Longman Publishing Co., Inc., Boston, MA, 1997
• 13: Alfred J. Menezes , Neal Koblitz, Elliptic Curve Public Key Cryptosystems, Kluwer Academic Publishers, Norwell, MA, 1994
• 14: {Milenkovic03} A. Milenkovic, M. Milenkovic, N. Barnes, "A Performance Evaluation of Memory Hierarchy in Embedded Systems", Proc. of 35th SSST, Mar. 2003.
• 15: {Miracl02} Miracl big integer library Web site, http://indigo.ie/~mscott/
• 16: {NIST95} NIST, Secure Hash Standard, FIPS pub180-1, 1995.
• 17: {NIST00} Digital Signature Standard, National Institute of Standards and Technology, FIPS pub 186--2, Jan. 2000.
• 18: {RSA02} RSA Laboratories' FAQs about Today's Cryptography, http://www.rsasecurity.com/rsalabs/faq
• 19: Bruce Schneier, Applied cryptography (2nd ed.): protocols, algorithms, and source code in C, John Wiley & Sons, Inc., New York, NY, 1995
• 20: {Ss97} D. C. Burger, T. M. Austin, "The SimpleScalar Tool Set, Version 2.0", Tech. Report CS-TR-97-1342, University of Wisconsin-Madison, June 1997.
• 21: {Ss02} SimpleScalar LLC, http://www.simplescalar.com