BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//PKI Consortium//Conference Agenda//EN
CALSCALE:GREGORIAN
METHOD:PUBLISH
X-WR-CALNAME:Post-Quantum Cryptography Conference
X-WR-TIMEZONE:Europe/Amsterdam
BEGIN:VEVENT
UID:agenda-1fec1ffa-3dd6-4a9a-93b8-91f234d7db30@ics.pkic.org
SEQUENCE:0
DTSTAMP:20261023T000842Z
DTSTART:20261201T151500Z
DTEND:20261201T155500Z
STATUS:CONFIRMED
SUMMARY:Gaming the Speed-vs-Memory Tradeoff for ML-DSA and ML-KEM
DESCRIPTION:FIPS is only a suggestion\, sortof. Specifically\, FIPS only re
 quires "mathematical equivalence" to the listed algorithms\, and that gives
  a surprisingly wide latitude for implementations to play algorithmic games
  in search of either fast or small implementations.\n\nThis talk will explo
 re speed-vs-memory tradeoff techniques applicable to the ML-DSA and ML-KEM 
 algorithms and the results that they obtain within the Bouncy Castle Rust l
 ibrary. We start with a close look at the "default" implementation\, then a
 t what you can do to move around the High Speed <--> Low Memory spectrum. I
 n one direction\, you can pre-expand intermediate values at key-load time f
 or faster sign\, verify\, encaps and decaps operations which gives performa
 nce increases in the 40% - 60% range (especially valuable if doing multiple
  operations against the same key). In the other direction\, your in-memory 
 private key representation can consist of only intermediate seed values and
  you can re-derive the active lattice values one entry at a time as they ar
 e needed\; you pay a penalty for deriving the same intermediate values mult
 iple times for a dramatic reduction in memory footprint. This technique has
  a particularly pronounced effect on ML-DSA where ML-DSA-87.sign() can be p
 erformed in under 30 kb of peak memory usage\, which represents roughly a 7
 .5x decrease in memory usage in exchange for a 6x increase in runtime\; whi
 ch is a win on heavily-loaded servers where parallelism is gated by RAM not
  by CPU.\n\n\nSpeakers: Mike Ounsworth
LOCATION:Blue hall
CATEGORIES:Blue hall
URL:https://pkic.org/events/2026/pqc-conference-amsterdam-nl/agenda/
END:VEVENT
END:VCALENDAR