Paper 2026/442

Memory-Efficient Implementation of SMAUG-T and HAETAE

Subeen Cho, Hansung University

Uijae Kim, Hansung University

Minwoo Lee, Hansung University

Hwajeong Seo, Hansung University

Minjoo Sim, Hansung University

Abstract

SMAUG-T and HAETAE, designated as target algorithms for national standardization via the Korean Post-Quantum Cryptography (KpqC) competition, run efficiently on general-purpose platforms. On ARM Cortex-M4 class microcontrollers, however, peak stack usage becomes a key constraint: while SMAUG-T can be executed on typical Cortex-M4 boards, the baseline HAETAE implementation exceeds the available SRAM (e.g., 91{,}176\,B stack for signing), motivating dedicated memory optimization. To address this problem, we propose a suite of memory optimization techniques for SMAUG-T and HAETAE that enable their practical operation within the strict memory budget of the Cortex-M4. Experimental results demonstrate that, compared to the KpqClean\_ver2 baseline, peak stack usage was reduced by 73--83~\% for SMAUG-T5 (e.g., 24{,}300\,B$\rightarrow$4{,}240\,B in decapsulation) and by about 90~\% for HAETAE5 (e.g., 91{,}176\,B$\rightarrow$8{,}092\,B in signing). Furthermore, a branchless constant-time design was applied throughout to ensure that the optimized implementations remain robust against side-channel threats such as timing attacks. This work provides a practical methodology for deploying KpqC lattice-based cryptography in memory-constrained embedded environments.

@misc{cryptoeprint:2026/442,
      author = {Yulim Hyoung and Subeen Cho and Uijae Kim and Minwoo Lee and Hwajeong Seo and Minjoo Sim},
      title = {Memory-Efficient Implementation of {SMAUG}-T and {HAETAE}},
      howpublished = {Cryptology {ePrint} Archive, Paper 2026/442},
      year = {2026},
      url = {https://eprint.iacr.org/2026/442}
}