摘要： 量子计算机的发展威胁到了现有公钥密码系统的安全性，为防止“先存储，后解密”的攻击，现有公钥密码系统向后量子密码系统迁移迫在眉睫。基于理想格构造的Aigis-sig数字签名方案和Aigis-enc密钥封装方案为我国密码算法设计竞赛一等奖作品，具有抗量子攻击的优势。为了使Aigis-sig/enc能够在有限的硬件资源中高效应用，本文对两系统的代码进行整合、提高了资源利用率，在硬件模块上设计了两组蝶形运算器，通过流水线操作大幅提升快速数论变换(NTT)的计算效率；以此为基础，提出了Aigis-sig方案和Aigis-enc方案的软硬件协同实现方法。经实验测试，本文所设计方案相较于纯软件实现有可观的性能提升,其中ROM空间占用降低65%，数字签名/验签平均运行时间分别缩短29%和11%，密钥封装/解封装平均运行时间分别缩短13%和21%。本文的研究对后量子密码的实用化有重要的参考价值。

Abstract: The development of quantum computing has threatened the security of current public key cryptographic systems. To prevent "harvest now, decrypt latter" attacks, migration to post-quantum cryptographic systems is imminent. The Aigis-sig digital signature scheme and Aigis-enc key encapsulation scheme based on ideal lattices construction, which won the first prize in China's cryptographic algorithm design competition, are resistant to quantum attacks. In order to apply Aigis-sig/enc on limited hardware resources efficiently, this paper integrates the code of the two systems to improve resource utilization, and designs two sets of butterfly operation in the hardware module, and significantly improves the computational efficiency of the fast Number Theoretic Transform (NTT) through pipelined operations. Based on these, the hardware and software cooperative implementation of Aigis-sig and Aigis-enc schemes is proposed. The experimental results show that compared with pure software implementation, the design scheme in this paper has considerable performance improvement. Among them, the ROM space usage is reduced by 65%, the average digital signature/verification run time decreases by 29% and 11%; average key encapsulation/decapsulation run time is reduced by 13% and 21%, respectively. This research is of considerable referential importance to the practical application of post-quantum cryptography.