Open Access

ARTICLE

Constant-Time Symmetry Exploitation for NTT Twiddle Factors in ML-KEM: A Unified Cost Model for Embedded Deployments

Xiaobing Liang¹, Yu Qin¹, Shengdong Pan², Liang Tan^2,*

1 China Electric Power Research Institute Co., Ltd., Beijing, China
2 College of Computer Sciences, Sichuan Normal University, Chengdu, China

* Corresponding Author: Liang Tan. Email:

Computers, Materials & Continua 2026, 88(3), 90 https://doi.org/10.32604/cmc.2026.082928

Received 27 March 2026; Accepted 05 June 2026; Issue published 23 July 2026

Abstract

The standardization of the Module-Lattice-Based Key-Encapsulation Mechanism (ML-KEM, FIPS 203) creates urgent demand for efficient post-quantum cryptography on resource-constrained devices. In such deployments, twiddle-factor management in the Number Theoretic Transform (NTT) induces a practical trade-off: full tables reduce latency but consume read-only memory (ROM), while on-the-fly generation reduces ROM but increases arithmetic cost. This paper makes two contributions. First, we present a constant-time half-table strategy (Shalf) with branchless reconstruction logic and a formal indexing rule consistent with implementation. Second, we develop a Memory-Arithmetic Trade-off (MAT) model that unifies ROM, random-access memory (RAM), latency, energy, and side-channel risk into one device-aware objective. On ARM Cortex-M4, the proposed strategy reduces twiddle-factor ROM by 50% with a cycle overhead of about 3%–6% vs. full-table lookup in the same C framework. We additionally report cross-platform measurements on RISC-V and x86, where empirical best-strategy outcomes match MAT predictions. The resulting framework supports hardware-aware strategy selection with explicit assumptions on threat model and constant-time scope.

---

Keywords

---