Transactions on Cryptographic Hardware and Embedded Systems 2026
Verified non-recursive calculation of Beneš networks applied to Classic McEliece
Wrenna Robson
University of Bristol, Bristol, UK
Samuel Kelly
University of Bristol, Bristol, UK
Keywords: Computer aided cryptography, formal methods, efficient software implementation, permutation networks
Abstract
The Beneš network can be utilised to apply a single permutation to different inputs repeatedly. We present novel generalisations of Bernstein’s [Ber20] formulae for the control bits of a Beneš network and from them derive an iterative control bit setting algorithm. We provide verified proofs of our formulae and prototype a provably correct implementation in the Lean language and theorem prover. We develop and evaluate portable and vectorised implementations of our algorithm in the C programming language. Our implementation utilising Intel’s Advanced Vector eXtensions 2 feature reduces execution latency by 29% compared to the equivalent implementation in the libmceliece software library on the Intel Ultra 7 165U CPU.
Publication
IACR Transactions on Cryptographic Hardware and Embedded Systems, Volume 2026, Issue 3
PaperArtifact
Artifact number
tches/2026/a46
Artifact published
September 21, 2026
Badge
✅ IACR CHES Artifacts Functional
License
This work is licensed under the MIT License.
Note that license information is supplied by the authors and has not been confirmed by the IACR.
BibTeX How to cite
Wrenna Robson, Samuel Kelly. (2026). Verified non-recursive calculation of Beneš networks applied to Classic McEliece. IACR Transactions on Cryptographic Hardware and Embedded Systems, 2026(3), 306–333. https://doi.org/10.46586/tches.v2026.i3.306-333. Artifact at https://artifacts.iacr.org/tches/2026/a46.