You know how a cashier making change avoids pennies by rounding to the nearest nickel? They accept a tiny representational imprecision — carrying a few extra cents of slack — to eliminate the slow step of counting out exact copper. This paper does the same thing for modular arithmetic inside post-quantum cryptography hardware. By letting numbers carry a small amount of controlled redundancy, the authors eliminate the expensive conditional-correction steps that normally choke NTT butterfly pipelines. The committed claim: a unified redundant number representation that removes conditional corrections from both Montgomery modular multiplication and combined subtract-multiply operations inside NTT/INTT butterfly units for ML-KEM (CRYSTALS-Kyber) and ML-DSA (CRYSTALS-Dilithium), while folding inverse-transform scaling into existing hardware so no dedicated scaling unit is needed. This is an Nth-iteration optimization paper, not a paradigm shift — but it attacks exactly the right bottleneck. The NTT accelerator design space for lattice-based PQC is crowded. Existing designs from groups like Xing and Li (2021), Mert et al. (2022), and others already exploit parallelism and pipelining. What limits them is the overhead tax: every modular reduction needs a conditional check, every INTT needs a final scaling pass, and FPGA DSP blocks often go underutilized because the multiplier structure does not map cleanly. This paper's contribution is architectural plumbing — hierarchical Montgomery multipliers designed to map onto FPGA DSP slices efficiently, combined with the redundant representation that lets the pipeline skip correction stages entirely. The validation is FPGA synthesis and implementation — real hardware, not simulation. The authors report higher clock frequencies and reduced execution times compared to prior NTT accelerators, with competitive resource utilization. The results target both ML-KEM and ML-DSA parameter sets. This is the right kind of evidence for a hardware microarchitecture paper: you synthesize it, you clock it, you measure the resources. The absence of ASIC results and the lack of side-channel analysis are the obvious gaps. The architectural family here is iterative parallel NTT with pipelined butterfly units using Montgomery multiplication — the dominant paradigm for hardware NTT since the PQC standardization push began. The key structural innovation is the redundant representation that unifies forward and inverse transforms, eliminating the conditional correction overhead that prior Montgomery-based designs accepted as cost-of-doing-business. The hardware lever is FPGA DSP48 blocks, and the hierarchical multiplier design is specifically shaped to exploit their native multiply-accumulate structure. The milestone ladder for PQC hardware is clear: NIST finalized ML-KEM and ML-DSA standards, and now the race is to get efficient hardware into TLS offload engines, HSMs, and embedded devices. The concrete next target is ASIC tape-out with side-channel countermeasures at frequencies competitive with classical crypto accelerators — likely within 2-3 years as PQC migration mandates begin biting. This paper moves one rung up that ladder by showing the arithmetic overhead can be compressed without adding area. The obvious experiment not run is side-channel resistance evaluation — power analysis, timing attacks, electromagnetic emanation. For a PQC accelerator destined for real deployment, this is the make-or-break test. The honest read: this is almost certainly scope management for a follow-up paper, not a failed experiment. The redundant representation might actually help with constant-time guarantees, but that claim requires its own dedicated analysis and measurement apparatus.
