KEM-22: An Efficient Post-Quantum ML-KEM Hardware Accelerator on 22-nm ASIC
This paper presents a performant and compact hardware accelerator for the ML-KEM algorithm, compliant with the NIST FIPS 203 specification and implemented in a 22nm ASIC technology. The proposed design supports all three standardized security levels (ML-KEM-512, -768, and -1024) using a unified, parameter-agnostic architecture that avoids logic duplication. The design relies exclusively on SRAM blocks for storage, completely eliminating FIFOs and intermediate buffers, while flip-flops are used only in timing-critical paths to achieve high-frequency operation with minimal area overhead. Among all known ASIC implementations, our architecture achieves the best normalized area-time product across all ML-KEM parameter sets, demonstrating efficiency and scalability, while also delivering the lowest power and energy per operation among state-of-the-art solutions. These results make the proposed design a strong candidate for real-world post-quantum cryptographic deployments on constrained hardware and IoT platforms.
Authors
- Stefano Di Matteo (ORCID: https://orcid.org/0000-0002-5711-432X)
- Emanuele Valea (ORCID: https://orcid.org/0000-0001-9804-7250)
- Sergio Saponara (ORCID: https://orcid.org/0000-0001-6724-4219)
- Ivan Sarno (ORCID: https://orcid.org/0009-0003-6447-3587)
Institutions
- University of Pisa (IT)
- Commissariat à l'Énergie Atomique et aux Énergies Alternatives (FR)
- CEA Grenoble (FR)
- Laboratoire d'Électronique des Technologies de l'Information (FR)
- Université Grenoble Alpes (FR)
Publication Details
- Journal
- IEEE Internet of Things Journal
- Published
- 2025-11-20
- DOI
- https://doi.org/10.1109/jiot.2025.3635477
- Primary Topic
- Cryptographic Implementations and Security
- Type
- article
- Field-Weighted Citation Impact
- 0.00