RECTANGLE: a bit-slice lightweight block cipher suitable for multiple platforms

Abstract

In this paper, we propose a new lightweight block cipher named RECTANGLE. The main idea of the design of RECTANGLE is to allow lightweight and fast implementations using bit-slice techniques. RECTANGLE uses an SP-network. The substitution layer consists of 16 4 × 4 S-boxes in parallel. The permutation layer is composed of 3 rotations. As shown in this paper, RECTANGLE offers great performance in both hardware and software environment, which provides enough flexibility for different application scenario. The following are 3 main advantages of RECTANGLE. First, RECTANGLE is extremely hardware-friendly. For the 80-bit key version, a one-cycle-per-round parallel implementation only needs 1600 gates for a throughput of 246 Kbits/s at 100 kHz clock and an energy efficiency of 3.0 pJ/bit. Second, RECTANGLE achieves a very competitive software speed among the existing lightweight block ciphers due to its bit-slice style. Using 128-bit SSE instructions, a bit-slice implementation of RECTANGLE reaches an average encryption speed of about 3.9 cycles/byte for messages around 3000 bytes. Last but not least, we propose new design criteria for the RECTANGLE S-box. Due to our careful selection of the S-box and the asymmetric design of the permutation layer, RECTANGLE achieves a very good security-performance tradeoff. Our extensive and deep security analysis shows that the highest number of rounds that we can attack, is 18 (out of 25).

Security Evaluation of Light-Weight Block Ciphers by GPGPU

“…(11), the number of balanced bits increases in Eq. (10). In this way, upper bound of integral distinguisher can not be obtained if we do not consider other integral distinguisher than m-th order one.…”

“…In the implementation of block ciphers in GPGPU, we consider three parameters needed for acceleration in Sec.5.1. In Sec.5.2, we execute computer experiment in HIGHT [3], LBlock [5], TWINE [8], PRESENT [1] and RECTANGLE [10] and show their execution times.…”

“…In ISO/IEC 29192-2, it is being standardized and PRESENT [1] and CLEFIA [2] have already been adopted. In addition, some of light-weight block ciphers are proposed, for example, HIGHT [3], KLEIN [4], LBlock [5], Piccolo [6], LED [7], TWINE [8], SIMON/SPECK [9] RECTANGLE [10] and so on. On the design of light-weight block ciphers, designers must consider trade-off between fastness and security.…”

A Survey on Lightweight Block Ciphers

“…RECTANGLE [19] is a bit-slice ultra-lightweight block cipher suitable for multiple platforms which achieve very low area in hardware and also very competitive performance in software. RECTANGLE is SPN structure, the substitution layer (S-layer) consists of 16 4 bits S-boxes, the permutation layer (P-layer) is composed of 3 rotations.…”

Differential Factors: Improved Attacks on SERPENT

“…We observed that 73% of all possible bijective 3 × 3 S-boxes contain differential factors. Moreover, 4 × 4 S-boxes of DES [28], GOST [39], LBLOCK [41], LED [18], LUFFA [12], NOEKEON [15], Piccolo [35], Present [11], RECTANGLE [42], SARMAL [40], SERPENT [1], spongent [10] and Twofish [33] contain differential factors.…”