International Association for Cryptologic Research

International Association
for Cryptologic Research

Transactions on Cryptographic Hardware and Embedded Systems 2026

Verified non-recursive calculation of Beneš networks applied to Classic McEliece


Wrenna Robson
University of Bristol, Bristol, UK

Samuel Kelly
University of Bristol, Bristol, UK


Keywords: Computer aided cryptography, formal methods, efficient software implementation, permutation networks


Abstract

The Beneš network can be utilised to apply a single permutation to different inputs repeatedly. We present novel generalisations of Bernstein’s [Ber20] formulae for the control bits of a Beneš network and from them derive an iterative control bit setting algorithm. We provide verified proofs of our formulae and prototype a provably correct implementation in the Lean language and theorem prover. We develop and evaluate portable and vectorised implementations of our algorithm in the C programming language. Our implementation utilising Intel’s Advanced Vector eXtensions 2 feature reduces execution latency by 29% compared to the equivalent implementation in the libmceliece software library on the Intel Ultra 7 165U CPU.

Publication

IACR Transactions on Cryptographic Hardware and Embedded Systems, Volume 2026, Issue 3

Paper

Artifact

Artifact number
tches/2026/a46

Artifact published
September 21, 2026

Badge
✅ IACR CHES Artifacts Functional

README

ZIP (1580708 Bytes)  

View on Github

License
This work is licensed under the MIT License.

Note that license information is supplied by the authors and has not been confirmed by the IACR.


BibTeX How to cite

Wrenna Robson, Samuel Kelly. (2026). Verified non-recursive calculation of Beneš networks applied to Classic McEliece. IACR Transactions on Cryptographic Hardware and Embedded Systems, 2026(3), 306–333. https://doi.org/10.46586/tches.v2026.i3.306-333. Artifact at https://artifacts.iacr.org/tches/2026/a46.