FOAM : searching for hardware-optimal SPN structures and components with a fair comparison
Poschmann, Axel Y.
Date of Issue2014
School of Physical and Mathematical Sciences
In this article, we propose a new comparison metric, the gure of adversarial merit (FOAM), which combines the inherent security provided by cryptographic structures and components with their implementation properties. To the best of our knowledge, this is the rst such metric proposed to ensure a fairer comparison of cryptographic designs. We then apply this new metric to meaningful use cases by studying Substitution-Permutation Network permutations that are suited for hardware implementations, and we provide new results on hardware-friendly cryptographic building blocks. For practical reasons, we considered linear and di erential attacks and we restricted ourselves to fully serial and round-based implementations. We explore several design strategies, from the geometry of the internal state to the size of the S-box, the eld size of the di usion layer or even the irreducible polynomial de ning the nite eld. We nally test all possible strategies to provide designers an exhaustive approach in building hardware-friendly cryptographic primitives (according to area or FOAM metrics), also introducing a model for predicting the hardware performance of round-based or serial-based implementations. In particular, we exhibit new di usion matrices (circulant or serial) that are surprisingly more e cient than the current best known, such as the ones used in AES, LED and PHOTON.
DRNTU::Engineering::Computer science and engineering::Data::Coding and information theory
Lecture notes in computer science
© 2014 International Association for Cryptologic Research. This is the author created version of a work that has been peer reviewed and accepted for publication by Lecture Notes in Computer Science, International Association for Cryptologic Research. It incorporates referee’s comments but changes resulting from the publishing process, such as copyediting, structural formatting, may not be reflected in this document. The published version is available at: [Article DOI: http://dx.doi.org/10.1007/978-3-662-44709-3_24].