Paper 2026/1915 Original: eprint.iacr.org/2026/1915 ↗
A RAM-Efficient Implementation of Falcon
Abstract
We present a RAM-efficient implementation of Falcon: RAM usage has shrunk to about 11 kB, down from about 31 kB in the previous implementation of Falcon-512. This code is furthermore faster on Arm Cortex M4, with average signature generation cost down to 13.45 million cycles. Optimization techniques include a novel variant of the FFT, replacement of some floating-point operations with modular integer computations, delayed addition of input within the Fast Fourier sampling process, and an alternate signature reassembly process. More than half of the floating-point operations have been removed. The resulting implementation is now small enough to allow use in small embedded systems such as smart cards.
Metadata
- Available format(s)
PDF- Category
- Implementation
- Publication info
- Preprint.
- History
- 2026-09-10: last updated
- 2026-09-07: published
- Short URL
- https://ia.cr/2026/1915
- License
- https://creativecommons.org/licenses/by/4.0/
BibTeX
@misc{cryptoeprint:2026/1915,
author = {Thomas Pornin},
title = {A RAM-Efficient Implementation of Falcon},
howpublished = {Cryptology {ePrint} Archive, Paper 2026/1915},
year = {2026},
url = {https://eprint.iacr.org/2026/1915}
}