MILP Modeling for (Large) S-boxes to Optimize Probability of Differential Characteristics

Abdelkhalek, Ahmed; Sasaki, Yu; Todo, Yosuke; Tolba, Mohamed F.; Youssef, Amr M.

doi:10.13154/tosc.v2017.i4.99-129

Cited by 13 publications

(3 citation statements)

References 0 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…1 As S-boxes diffuse each active bit to multiple rows, each S D i should not have the common efficient trails. Criterion 2 For any (i, j) with i = j and any (α, β) ∈ {1, 2, 3, 6} × {1, 2, 3, 6} except for (2,6) and (6, 2),…”

Section: Choice Of the Subblockdiffusion Layermentioning

confidence: 99%

“…Differential and linear cryptanalyses. We estimated the minimum number of differentially and linearly active S-boxes by using MILP [2,39]. Both numbers of differentially and linearly active S-boxes are 16 in 3 rounds.…”

Section: Security Analysismentioning

confidence: 99%

“…We perform an extensive security analysis of the Sycon permutation against powerful cryptanalytic attacks such as differential, linear, integral and differential-linear attacks. We apply the mixed integer linear programming (MILP) tool [2,28,39] to determine the number of active S-boxes. For the 3-round permutation, Sycon has 16 differentially and linearly active S-boxes, whereas ASCON has 15 and 13 active S-boxes, respectively.…”

Section: Introductionmentioning

confidence: 99%

See 2 more Smart Citations

Sycon: a new milestone in designing ASCON-like permutations

et al. 2021

Self Cite

View full text Add to dashboard Cite

ASCON is one of the elegant designs of authenticated encryption with associated data (AEAD) that was selected as the first choice for lightweight applications in the CAESAR competition, which also has been submitted to NIST lightweight cryptography standardization. ASCON has been in the literature for a while; however, there has been no successful AEAD which is secure and at the same time lighter than ASCON. In this article, we have overcome the challenge of constructing a permutation that is lighter than the ASCON permutation while ensuring a similar performance, and based on which we achieve a more lightweight AEAD which we call Sycon. Extensive security analysis of Sycon confirms that it provides the same level of security as that of ASCON. Our hardware implementation result shows that the Sycon permutation has 5.35% reduced area, compared to the ASCON permutation. This leads to a remarkable area reduction for Sycon AEAD which is about 14.95% as compared to ASCON AEAD. We regard Sycon as a new milestone as it is the lightest among all the AEADs belonging to the ASCON family.

show abstract

Section: Choice Of the Subblockdiffusion Layermentioning

confidence: 99%

Section: Security Analysismentioning

confidence: 99%