Transactions on Cryptographic Hardware and Embedded Systems 2026
YATA:
Yet Another TFHE Accelerator with Key Compression and Radix-8 NTT
Kotaro Matsuoka
Kyoto University, Kyoto, Japan
Takashi Sato
Kyoto University, Kyoto, Japan
Keywords: Fully Homomorphic Encryption, TFHE, ASIC Accelerator, Siliconproven, Bootstrapping, Blind Rotate
Abstract
This paper introduces a silicon-proven ASIC accelerator, YATA, specifically designed for TFHE’s most demanding operation, the BlindRotate. The architecture tackles the main bottleneck in TFHE—massive memory bandwidth—by applying Key Compression to reduce the size of the bootstrapping key significantly. It further enhances performance and area efficiency through a novel Radix-8 Number Theoretic Transform (NTT), using carefully chosen prime moduli that allow cost-effective constant multiplications and streamlined modular reductions. Fabricated in a 22nm process, YATA’s design occupies only 5.93mm2 and achieves 0.32 ms BlindRotate latency for the targeted security parameters. YATA offers a practical route toward fully homomorphic encryption deployments on customized hardware. Overall, this work demonstrates the feasibility of ASIC-based accelerators for TFHE in latency and power efficiency, establishing a foundation for future TFHE-based privacy-preserving applications.
Publication
IACR Transactions on Cryptographic Hardware and Embedded Systems, Volume 2026, Issue 1
PaperArtifact
Artifact number
tches/2026/a5
Artifact published
March 31, 2026
Badge
✅ IACR CHES Artifacts Available
License
This work is licensed under the GNU Affero General Public License version 3.
Note that license information is supplied by the authors and has not been confirmed by the IACR.
BibTeX How to cite
Kotaro Matsuoka, Takashi Sato. (2026). YATA: Yet Another TFHE Accelerator with Key Compression and Radix-8 NTT. IACR Transactions on Cryptographic Hardware and Embedded Systems, 2026(1), 325–352. https://doi.org/10.46586/tches.v2026.i1.325-352. Artifact at https://artifacts.iacr.org/tches/2026/a5.