🤖 AI Summary
This work addresses the challenge of efficiently supporting polynomial multiplication—a core operation in fully homomorphic encryption and post-quantum cryptography—on general-purpose AI accelerators without dedicated hardware. The authors propose MPX, a dual-mode systolic array architecture that, for the first time, reveals an intrinsic alignment between the wavefront dataflow of systolic arrays and the multiply-accumulate pattern of polynomial multiplication. This insight enables direct polynomial multiplication without requiring Number Theoretic Transform (NTT), while sharing the same hardware used for matrix multiplication. The design incurs only 20% area overhead, leaves matrix multiplication power consumption virtually unchanged, and reduces polynomial multiplication latency by more than 1.2× compared to NTT-based approaches.
📝 Abstract
Polynomial multiplication is a fundamental kernel in Fully Homomorphic Encryption (FHE) and post-quantum cryptography (PQC) and is commonly accelerated through Number Theoretic Transforms (NTTs). To avoid the cost of designing dedicated cryptographic accelerators, recent efforts have mapped NTT computations onto existing systolic matrix engines, enabling the reuse of AI hardware for cryptographic workloads. In this work, we take the opposite approach. We observe that the wavefront dataflow of systolic arrays naturally aligns with the accumulation pattern of polynomial multiplication and leverage this correspondence to design MPX, a dual-mode systolic array that supports both matrix multiplication and direct polynomial multiplication within the same hardware fabric. Experimental results show that extending a conventional systolic array with this dual-mode capability requires only 20% additional area and introduces negligible power overhead during matrix-multiplication execution. In polynomial-multiplication mode, MPX achieves more than 1.2x lower latency compared to NTT-based polynomial multiplication on systolic matrix engines.