4 ms·

They're a dime a dozen these days. Incomplete list, block ciphers only: HIGHT [1], PRESENT [2], KLEIN [3], PRINTcipher [4], KATAN [5], TWINE [6], LED [7], PRINC

by pbsd 13y ago

They're a dime a dozen these days. Incomplete list, block ciphers only: HIGHT [1], PRESENT [2], KLEIN [3], PRINTcipher [4], KATAN [5], TWINE [6], LED [7], PRINCE [8], Piccolo [9]. AES is generally known to be doable in around 2500 gates, or gate-equivalents. These lightweight ciphers aim lower, towards the 1000 or so. [1] http://www.iacr.org/cryptodb/archive/2006/CHES/04/04.pdf http://www.iacr.org/cryptodb/archive/2006/CHES/04/04.pdf [2] http://homes.esat.kuleuven.be/~abogdano/papers/present_ches07.pdf http://homes.esat.kuleuven.be/~abogdano/papers/present_ches0... [3] http://doc.utwente.nl/73129/1/The_KLEIN_Block_Cipher.pdf http://doc.utwente.nl/73129/1/The_KLEIN_Block_Cipher.pdf [4] http://www.iacr.org/archive/ches2010/62250016/62250016.pdf http://www.iacr.org/archive/ches2010/62250016/62250016.pdf [5] http://www.cs.technion.ac.il/~orrd/KATAN/CHES2009.pdf http://www.cs.technion.ac.il/~orrd/KATAN/CHES2009.pdf [6] http://www.nec.co.jp/rd/media/code/research/images/twine_LC11.pdf http://www.nec.co.jp/rd/media/code/research/images/twine_LC1... [7] http://eprint.iacr.org/2012/600.pdf http://eprint.iacr.org/2012/600.pdf [8] http://eprint.iacr.org/2012/529.pdf http://eprint.iacr.org/2012/529.pdf [9] http://link.springer.com/chapter/10.1007%2F978-3-642-23951-9_23 http://link.springer.com/chapter/10.1007%2F978-3-642-23951-9...

tptacek 13y ago
Do you see anything interesting in the design of SIMON? Apart from how parsimonious it is with mathematical operations.
- pbsd 13y ago
  The design looks very elegant, and they manage to avoid using sboxes at all, departing from most known lightweight ciphers. It also has decent performance in 64-bit hardware, without having to recur to bitslicing, which is nice. The whole round has algebraic degree 2, like Keccak, which makes things easier to analyze when it comes to differential and linear cryptanalysis. Hard to say much more at this point.
  - e3pi 13y ago
    Elegance and speed optimization is inconsequential for any non-real time, sub-TB? sub-GB file size. Or, what am I missing?
    - tptacek 13y ago
      The point of the design, which is intended for microcontrollers, not your desktop.

by pbsd 13y ago

tptacek 13y ago

Do you see anything interesting in the design of SIMON? Apart from how parsimonious it is with mathematical operations.

pbsd 13y ago
The design looks very elegant, and they manage to avoid using sboxes at all, departing from most known lightweight ciphers. It also has decent performance in 64-bit hardware, without having to recur to bitslicing, which is nice. The whole round has algebraic degree 2, like Keccak, which makes things easier to analyze when it comes to differential and linear cryptanalysis. Hard to say much more at this point.
- e3pi 13y ago
  Elegance and speed optimization is inconsequential for any non-real time, sub-TB? sub-GB file size. Or, what am I missing?
  - tptacek 13y ago
    The point of the design, which is intended for microcontrollers, not your desktop.