RISC-V Instruction Set Extensions for Cryptography - From Research to Standardization
summary
RISC‑V already includes scalar crypto extensions ratified 2021 covering bit ops, carry‑less multiply, AES and SHA and data‑independent execution; AES instructions add roughly 1000 gate equivalents and give multi‑x speedups versus pure ISA sequences. Vector crypto proposals are in public review and Ascon (the Ascon winner) maps to just two extra ops with a smaller memory footprint, while fully hardwired accelerators blow up area to >4000 gate equivalents and can reach ~50× speedups.
AI-written summary · about
chapters (11)
- 0:00RISC-V crypto extensions intro
- 1:24Crypto algorithm standardization timeline
- 2:51Adoption challenges in crypto support
- 3:53Ratified crypto extensions overview
- 5:16AES instructions integration
- 7:06Planned vector crypto extensions
- 7:48Lightweight crypto and Ascon
- 9:38Hardware impact: Ascon vs AES
- 11:02Parallel Ascon case study
- 12:46Physical attack countermeasures
- 13:28Future challenges
related talks
19mOn the Efficiency of RISC-V Cryptographic Instruction Set Extensions
21mRISC-V International Security Overview
14mUsing Proposed Vector And Crypto Extensions For Fast And Secure Boot
14mSecurity Task Group Update And RISC V security Extension
19mAn Open Source Approach to System Security
20mRISC-V open designs and contributions to hardware security research and development activities
13mRISC-V: Securing the Future of Open Source Computing
13mUsing RISC V As a Security Processor For DARPA CHIPS And Commercial IoT
