Pushing the Limits of SHA-3 Hardware Implementations to Fit on RFID

Abstract

Abstract. There exists a broad range of RFID protocols in literature that propose hash functions as cryptographic primitives. Since Keccak has been selected as the winner of the NIST SHA-3 competition in 2012, there is the question of how far we can push the limits of Keccak to fulfill the stringent requirements of passive low-cost RFID. In this paper, we address this question by presenting a hardware implementation of Keccak that aims for lowest power and lowest area. Our smallest (fullstate) design requires only 2 927 GEs (for designs with external memory available) and 5 522 GEs (total size including memory). It has a power consumption of 12.5 µW at 1 MHz on a low leakage 130 nm CMOS process technology. As a result, we provide a design that needs 40 % less resources than related work. Our design is even smaller than the smallest SHA-1 and SHA-2 implementations.

A Key Distribution Scheme for WSN Based on Hash Chains and Deployment Knowledge

“…Compared with SHA-1, SHA-2 will consume some more energy in the hardware implementation [16]. Now, a lot of work has been done to optimize the hardware implementation of SHA-2 and SHA-3 on the resource-constrained hardware platforms [17][18][19][20][21]. For example, when computing a message digest by a SHA-2, the energy consumption is always below 5 J per message block [18].…”

Differential Fault Analysis of SHA-3 Under Relaxed Fault Models

“…For commonly used SHA-3 implementations, data structures are organized along each lane [26,27]. There are two commonly used implementation methods for Keccak, noninterleaved and interleaved implementation [28].…”

“…As bit interleaving technique has been widely used in SHA-3 implementations in embedded cryptographic systems [26,27], we will evaluate both of these two implementations in our work. We refer to the source code provided online [26] for all implementations and simulations in this paper.…”

Enhancing the Key Distribution Model in the RFID-Enabled Supply Chains

“…The design of the SHA-3 algorithm takes into account the hardware implementation, so it has some properties of lightweight hash function [11]. Kavun et al [12] shows that Keccak[400], which takes an input of size 144 bits, is suitable for the RFID low cost tag.…”