A 2.7-to-13.3μJ/boot/slot Flexible RNS-CKKS Processor in 28nm CMOS Technology for FHE-Based Privacy-Preserving Computing

📋 论文概要

该论文提出了一款基于28nm CMOS工艺的灵活RNS-CKKS处理器，用于全同态加密（FHE）的隐私保护计算。该处理器实现了2.7至13.3μJ/boot/slot的能效，解决了在服务器系统中对加密数据进行高效计算的问题。

💡 主要创新点

• 设计了支持可配置插槽的灵活RNS-CKKS处理器架构，实现了能效与性能的权衡。
• 在28nm CMOS工艺中实现了2.7-13.3μJ/boot/slot的低能耗，适用于不同安全需求的隐私计算场景。
• 针对RNS-CKKS方案进行了硬件优化，提升了全同态加密运算的效率。

🏷 关键词

📄 原文摘要

*Equally Credited Authors Fully homomorphic encryption (FHE) has been gaining significant attention as a privacypreserving solution for emerging server systems with critical information, which allows the server to perform various primitive computations on encrypted data from clients without decrypting original messages as shown in Fig. 16.1.1 [3-6]. Among various FHE candidates, based on the ring learning with error (RLWE) problem, the recent CKKS approach using the residue number system (RNS) is regarded as the most promising method [4-6]. For an n-slot user message, the RNS-CKKS scheme constructs (l+1) Ndegree polynomials to save the processing complexity with low-resolution coefficients bounded by small prime moduli qi (0 ≤ i ≤ l). For the unlimited FHE operations, however, the bootstrapping step on RNS-CKKS polynomials requires significant computing costs, mainly caused by key-switch (KS) functions, including NTT/iNTT, base conversion

👥 作者与机构

Hyunhoon Lee*, Hyeokjun Kwon*, Youngjoo Lee

Pohang University of Science and Technology, Pohang, Korea