FrodoKEM is one of Post-quantum Cryptography, which is selected Round 3 alternate candidates of Public-key Encryption and Key-establishment Algorithms at NIST Post-quantum Cryptography Standardization. FrodoKEM uses AES algorithm for generate pseudo-random matrix, and also uses matrix-multiplication. At that time, a huge computational load occurred to the pseudo-random number generation and matrix-multiplication operation, reducing the overall performance of the FrodoKEM scheme. In this paper, we propose the parallel matrix-multiplication and built-in AES accelerator for AES encryption on ARMv8 processors, and applied these techniques to the FrodoKEM-640 scheme. To implement the parallel matrix-multiplication, vector registers (i.e. 128-bit wise) and vector instructions (i.e. NEON) are used. The proposed parallel matrix-multiplication can be generated 80 element of output matrix at once. As a result, the matrix-multiplication has 43.8x faster than the normal matrix-multiplication in the best-case, the implementation FrodoKEM-640 with all of proposed techniques has 10.22x better performance in maximum than previous C only implementation.
