HORCRUX: a Post-Quantum Cryptography Instruction Set Extension
2026-06-09 , Poster Island B

This paper introduces HORCRUX, an open RISC-V instruction set extension for post-quantum cryptography (PQC). A modular PQ-ALU, integrated through the Core-V eXtension Interface (CV-X-IF) accelerates the core kernels shared by hash-, lattice-, and code-based schemes, including Keccak processing, sampling, modular/polynomial arithmetic, finite-field operations, and coefficient compression. The design targets NIST-standardized algorithms (ML-KEM, ML-DSA, SLH-DSA, HQC) and additional candidates under evaluation. We release the complete hardware/software stack as open source and report 65 nm ASIC post-synthesis results: with a compact footprint of ~26.3 kGE and energy savings up to 99.5%, the extension provides a practical route to energy-efficient PQC on RISC-V with minimal integration effort.


We present a PQC instruction-set extension that prioritizes kernel-level reuse over per-algorithm specialization. The design identifies the recurring computational patterns that dominate PQC workloads and maps them onto a compact set of custom operations executed by a dedicated PQC arithmetic unit. The same accelerated building blocks support NIST-standardized schemes as well as a wider set of candidate designs, without requiring RTL modifications to the host CPU.
HORCRUX is implemented in a 65 nm CMOS ASIC flow at 100 MHz, with a synthesized area of 26.3 kGE (less than 2% of the host SoC). Each custom instruction is validated through dedicated micro-tests to capture realistic switching activity; post-synthesis power is estimated with Synopsys PrimePower and combined with measured cycle counts to derive energy per operation. Across the full kernel suite, the proposed instructions deliver approximately 5× average speedup over the software baseline and 47% average energy reduction, up to 99.5% for Karatsuba primitve. Overall, HORCRUX achieves a compact, PQC-ISE that provides consistent acceleration and energy savings across heterogeneous PQC families.

See also:

Valeria Piscopo received the B.Sc. and M.Sc. degrees in Electronic Engineering from Politecnico di Torino, in 2021 and 2024 respectively. Since November 2024, she is a Ph.D student in Electrical, Electronic and Communications Engineering at Politecnico di Torino. Her research activity is centered on the design of secure hardware accelerators for Post-Quantum Cryptography and their integration in RISC-V ecosystems.

This speaker also appears in:

Ph.D. researcher in Electrical/Electronic Engineering with strong organizational skills and high motivation. Experienced in hardware/software co-design for embedded systems, including RISC-V SoC integration, custom accelerator interfaces, RTL development (SystemVerilog), FPGA prototyping, and embedded C. Solid background in Post-Quantum Cryptography implementations and optimization, with a performance-driven mindset and enthusiasm for new technical challenges.

This speaker also appears in: