SKINNY-AEAD and SKINNY-Hash

Beierle, Christof; Jean, Jérémy; Kölbl, Stefan; Leander, Gregor; Moradi, Amir; Peyrin, Thomas; Sasaki, Yu; Sasdrich, Pascal; Sim, Siang Meng

doi:10.46586/tosc.v2020.is1.88-131

Cited by 26 publications

(10 citation statements)

References 14 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…In this case, the old bound of (2) implied generic preimage security up to 2 128 work, whereas our new bound (3) implies generic preimage security up to 2 192 work. A similar effect is achieved for the modes of other second round and final candidates in the NIST Lightweight Cryptography competition, such as ACE [1], KNOT [25], SKINNY-HASH [6], Subterranean 2.0 [15], the hash proposal of Isap [16], and PHOTON-Beetle [4]. These spongebased functions all have their parameters (c, r , n) satisfying n − r > c/2.…”

Section: Applicationmentioning

confidence: 65%

Tight Preimage Resistance of the Sponge Construction

Lefèvre

Mennink

2022

Lecture Notes in Computer Science

View full text Add to dashboard Cite

The cryptographic sponge is a popular method for hash function design. The construction is in the ideal permutation model proven to be indifferentiable from a random oracle up to the birthday bound in the capacity of the sponge. This result in particular implies that, as long as the attack complexity does not exceed this bound, the sponge construction achieves a comparable level of collision, preimage, and second preimage resistance as a random oracle. We investigate these state-ofthe-art bounds in detail, and observe that while the collision and second preimage security bounds are tight, the preimage bound is not tight. We derive an improved and tight preimage security bound for the cryptographic sponge construction.The result has direct implications for various lightweight cryptographic hash functions. For example, the NIST Lightweight Cryptography finalist Ascon-Hash does not generically achieve 2 128 preimage security as claimed, but even 2 192 preimage security. Comparable improvements are obtained for the modes of Spongent, PHOTON, ACE, Subterranean 2.0, and QUARK, among others.

show abstract

Section: Applicationmentioning

confidence: 65%

Tight Preimage Resistance of the Sponge Construction

Lefèvre

Mennink

2022

Lecture Notes in Computer Science

View full text Add to dashboard Cite

show abstract

“…The PICO cipher key schedule is based on the SPECK cipher key scheduling architecture, it uses key of 128 bit to extract 33 subkeys k0-k32 of size 64 bits and K32 is used for post whitening key.  SKINNY [43] This cipher proposed was by Beierle, et al in 2016. SKINNY family have SPN structure .It employs three key-length possibilities of n bits, 2n bits, or 3n bits, with n being the block size (64 or 128 bits).…”

Section:  Simeck[35]mentioning

confidence: 99%

Software Implementation Solutions of A Lightweight Block Cipher to Secure Restricted IoT Environment: A Review

AL_AZZAWI¹,

AL-DABBAGH²

2022

AL-Rafidain Journal of Computer Sciences and Mathematics

View full text Add to dashboard Cite

With the development of the Internet of Things (IoT) technology, IoT devices are integrated into many of our daily lives, including industrial, security, medical, and personal applications. Many violations of IoT safety have appeared due to the critical physical infrastructure, and network vulnerabilities. Considering the nature of the restricted and limited resources of these devices in terms of size, capacity, and energy, Security is becoming increasingly important. Lightweight cryptography is one of the directions that offer security solutions in resourceconstrained environments such as Radio-frequency identification (RFID) and wireless sensor network (WSN).This paper discusses the security issues of these resource-constrained IoT devices and reviews the most prominent Lightweight Bock Cipher suitable for software implementation. Through studying the specifications and the inner structure for each cipher and their implementation of the performance evaluation on some kind of platform, we provide a design strategies guideline for cryptographic developers to design improved Lightweight Block cipher solutions and compact software implementation for resource-constrained environments.

show abstract

“…While AES-OCB decryption requires the inverse function of the AES (i.e., AES decryption), AES-OTR achieves inverse-freeness in addition to rate-1 and parallelizability, by using a two-round Feistel network with mask-value addition. Many other AEADs such as Pyjamask [7] and SKINNY-AEAD [8] follow the construction of the OCB mode of operation, due to its high performance and desirable features. Thus, many AEADs, including the aforementioned ones, as well as candidates of the CAESAR and NIST LWC competitions, may sometimes show similarities.…”

Section: Brief Description Of Aeadmentioning

confidence: 99%

Unified Hardware for High-Throughput AES-Based Authenticated Encryptions

Sawataishi

Ueno

Homma

2020

IEEE Trans. Circuits Syst. II

View full text Add to dashboard Cite

This brief presents an efficient unified hardware for up-to-date authenticated encryptions with associated data (AEADs). Although some major AEADs share several fundamental components (e.g., advanced encryption standard (AES), block chaining, and XOR-Encryption-XOR (XEX) scheme), each AEAD is equipped with a unique mode of operation and/or subfunctions, which makes it difficult to integrate various AEADs in a hardware efficiently. The proposed hardware in this brief efficiently unifies the fundamental components to perform a set of AEADs with minimal area and power overheads. The proposed configurable datapath is adapted to a set of peripheral operations (e.g., block chaining and XEX), dictated by the given AEAD algorithm. In this brief, we also demonstrate the validity of the proposed hardware through an experimental design adapted to four AES-based AEADs. Consequently, we confirm that the proposed hardware can perform the four AEADs with quite smaller area than the sum of the each dedicated AEAD hardware, comparable throughput and power consumption. In addition, we confirmed that the proposed hardware is superior to software implementation on general-purpose processor in terms of both throughput and power consumption.

show abstract

SKINNY-AEAD and SKINNY-Hash

Cited by 26 publications

References 14 publications

Tight Preimage Resistance of the Sponge Construction

Tight Preimage Resistance of the Sponge Construction

Software Implementation Solutions of A Lightweight Block Cipher to Secure Restricted IoT Environment: A Review

Unified Hardware for High-Throughput AES-Based Authenticated Encryptions

Contact Info

Product

Resources

About