Once upon a time, we wrote a paper on memory-efficient Dilithium [1]
which included a speed-optimized version of verification that still
included some memory optimizations that don't come at a performance
penalty.
Unfortunately with the update of the reference code to round 3 that
version did not get migrated leading to some complaints about
verification memory consumption.
I finally found some time to port these.
Verficication speed is essentially unchanged, but stack consumption is
much better.
Once upon a time, we wrote a paper on memory-efficient Dilithium [1] which included a speed-optimized version of verification that still included some memory optimizations that don't come at a performance penalty.
Unfortunately with the update of the reference code to round 3 that version did not get migrated leading to some complaints about verification memory consumption.
I finally found some time to port these. Verficication speed is essentially unchanged, but stack consumption is much better.
[1] https://eprint.iacr.org/2020/1278