RISC-V Summit

We will give the latest performance evaluation of the main Post-Quantum Cryptography standards, Kyber and Dilithium, on RISC-V Vector Architecture and discuss possibilities for speeding it up further with new instructions. Due to its 1600-bit state size, a fast SHA3 / Keccak instruction would require slightly unusual architectural features from a vector processor. Based on hardware and software experiments and benchmarks, we argue that performance returns in Post-Quantum Cryptography still make it worthwhile for many common use cases, such as content delivery servers performing a lot of TLS handshakes.