Lattice-based cryptography is a promising candidate and remedy in public-key cryptography in case quantum computers become feasible or a major breakthrough in solving the factorization problem or the discrete logarithm problem is achieved. Due to ongoing research in this field, many schemes still lack implementations that examine their practicability, especially for embedded systems. In this work we discuss the potential of lattice-based signature schemes for practical applications on constrained devices in a post-quantum era. We focus on the schemes GLP, BLISS, and Dilithium and discuss their unique properties as well as challenges regarding their implementation on embedded devices. In this regard we present and review optimized implementations of these schemes for ARM Cortex-M4 microcontrollers to evaluate the practical performance of the schemes.
展开▼
