NTT Core (NTT-R16 Baseline)

Overview

Computational Core of Lattice Cryptography

The Number Theoretic Transform is the computational core of all lattice-based cryptography. This radix-16 baseline provides 256-point forward and inverse NTT for the ML-KEM modulus q=3329, with a parameterized single-butterfly datapath.

Key Features

Technical Capabilities

256-point forward and inverse NTT
q=3329 (ML-KEM modulus)
Parameterized single-butterfly datapath
Roadmap variants: NTT-R8 (area-constrained), NTT-R32 (~4x throughput)

Benefits

Why NTT Core

Computational engine for ML-KEM and ML-DSA
Configurable area/throughput trade-off via radix variants

Standards & Verification

Compliance and Testing

Standards Compliance

NIST FIPS 203

Verification

Verified vs golden + hardware round-trip.

Note: "Verified" means RTL byte-exact against official test vectors. It does not imply FIPS 140-3 certification or foundry sign-off.

Availability & Deliverables

What You Receive

Available Available (verified soft IP).

Standard Deliverables

Synthesizable SystemVerilog RTL
Self-checking testbench(es)
Python golden reference model
cocotb regression
Synthesis scripts
Integration/user guide

Firm/hard IP (hardened netlist for a target node) available on foundry enablement.

NTT Core (NTT-R16 Baseline).