1.中国科学院软件研究所,北京 100190
2.中国科学院大学,北京 100049
3.密码科学技术全国重点实验室,北京 100878
[ "吴瑞宸 男,1999年8月出生于浙江省温州市.现为中国科学院软件研究所硕士研究生.主要研究方向为分组密码设计与分析. E-mail: ruichen2021@iscas.ac.cn" ]
[ "张 蕾 女,1982年出生于吉林省.2010年毕业于中国科学院软件研究所.现为中国科学院软件研究所副研究员.主要研究方向为分组密码设计与分析. E-mail: zhanglei@tca.iscas.ac.cn" ]
收稿:2023-11-10,
修回:2024-06-06,
纸质出版:2024-11-25
移动端阅览
吴瑞宸, 张蕾. 低延迟S盒的构造及双向低延迟性质研究[J]. 电子学报, 2024, 52(11): 3769-3779.
WU Rui-chen, ZHANG Lei. Research on Construction of Low-Latency S-Boxes and Bidirectional Low-Latency Properties[J]. Acta Electronica Sinica, 2024, 52(11): 3769-3779.
吴瑞宸, 张蕾. 低延迟S盒的构造及双向低延迟性质研究[J]. 电子学报, 2024, 52(11): 3769-3779. DOI:10.12263/DZXB.20231047
WU Rui-chen, ZHANG Lei. Research on Construction of Low-Latency S-Boxes and Bidirectional Low-Latency Properties[J]. Acta Electronica Sinica, 2024, 52(11): 3769-3779. DOI:10.12263/DZXB.20231047
低延迟分组密码的设计是目前密码学研究中的热点之一,其中低延迟S盒的构造是设计中的重要研究方向.本文基于低延迟门电路和两层树型结构,搜索不同延迟水平下具有一定密码学性质的低延迟平衡布尔函数及其拓展比特置换等价类;基于将低延迟布尔函数作为分量布尔函数构造向量布尔函数的方法,本文构造得到了不同延迟水平下的低延迟S盒,并给出延迟性质和硬件实现面积具有优势的S盒实例;此外,本文对低延迟的S盒集合与逆S盒集合匹配搜索具有双向低延迟性质的S盒,给出搜索得到的实例.与PRINCE、MANTIS等其他低延迟分组密码中使用的4 bit S盒相比,本文构造的低延迟S盒在延迟水平上相较MANTIS降低了20%,与PRINCE相比降低了33%,在硬件实现面积上相较MANTIS减少了6.68%,与PRINCE相比减少了17.69%.
The quest for low-latency block ciphers is a burgeoning area of interest within the cryptographic community
with the development of low-latency S-boxes standing as a pivotal avenue of exploration.Leveraging gate circuits of minimal latency and a novel two-layer tree structure
our study delves into the construction of balanced Boolean functions and their extended bit permutation equivalence classes that manifest desirable cryptographic properties across varied latency thresholds.Utilizing these low-latency Boolean functions as coordinate functions
we craft vectorial Boolean functions to construct S-boxes with low-latency.Our research not only furnishes S-boxes optimized for latency performance and hardware implementation area but also pioneers the amalgamation of low-latency S-box sets with their corresponding inverse sets
searching for S-boxes with bidirectional low-latency property.The low-latency S-box in our investigation outperform existing benchmarks and offer more choices
showcasing a latency reduction of 20% and 33% over MANTIS and PRINCE
alongside achieving a hardware area reduction of 6.68% compared to MANTIS and a substantial improvement of 17.69% against PRINCE.
COSTAN V , DEVADAS S . Intel SGX explained [EB/OL ] . ( 2017-02-21 )[ 2024-03-10 ] . https://eprint.iacr.org/2016/08 6.pdf https://eprint.iacr.org/2016/086.pdf .
KAPLAN D , POWELL J , WOLLER T . AMD memory encryption [EB/OL ] . ( 2021-10-18 )[ 2024-03-10 ] . https://www.amd.com/content/dam/amd/en/documents/epyc-busin-essdocs/white-papers/memory-encryption-white-paper.pdf https://www.amd.com/content/dam/amd/en/documents/epyc-busin-essdocs/white-papers/memory-encryption-white-paper.pdf .
KNEŽEVIĆ M , NIKOV V , ROMBOUTS P . Low-latency encryption—is “lightweight = light + wait”? [M ] // Lecture Notes in Computer Science . Berlin : Springer , 2012 : 426 - 446 .
BORGHOFF J , CANTEAUT A , GÜNEYSU T , et al . PRINCE—A low-latency block cipher for pervasive computing applications [M ] // Lecture Notes in Computer Science . Berlin : Springer , 2012 : 208 - 225 .
BOŽILOV D , EICHLSEDER M , KNEŽEVIĆ M , et al . PRINCEv2: More security for (almost) no overhead [M ] // Lecture Notes in Computer Science . Cham : Springer International Publishing , 2021 : 483 - 511 .
BANIK S , BOGDANOV A , ISOBE T , et al . Midori: A block cipher for low energy [M ] // Lecture Notes in Computer Science . Berlin : Springer , 2015 : 411 - 436 .
BEIERLE C , JEAN J , KÖLBL S , et al . The SKINNY family of block ciphers and its low-latency variant MANTIS [M ] // Lecture Notes in Computer Science . Berlin : Springer , 2016 : 123 - 153 .
AVANZI R . The QARMA block cipher family. almost MDS matrices over rings with zero divisors, nearly symmetric even-mansour constructions with non-involutory central rounds, and search heuristics for low-latency S-boxes [J ] . IACR Transactions on Symmetric Cryptology , 2017 : 4 - 44 .
LEANDER G , MOOS T , MORADI A , et al . The speedy family of block ciphers—Engineering an ultra low-latency cipher from gate level for secure processor architectur-es [EB/OL ] . ( 2021-07-22 )[ 2024-03-10 ] . https://eprint.iacr.org/2021/960.pdf https://eprint.iacr.org/2021/960.pdf .
BANIK S , ISOBE T , LIU F K , et al . Orthros: A low-latency PRF [EB/OL ] . ( 2021-03-27 )[ 2024-03-10 ] . https://eprint.iacr.org/2021/390.pdf https://eprint.iacr.org/2021/390.pdf .
BIRYUKOV A , DE CANNIÈRE C , BRAEKEN A , et al . A toolbox for cryptanalysis: Linear and affine equivalence algorithms [M ] // Lecture Notes in Computer Science . Berlin, Heidelberg : Springer Berlin Heidelberg , 2003 : 33 - 50 .
LEANDER G , POSCHMANN A . On the Classification of 4 Bit S-Boxes [M ] // Lecture Notes in Computer Science . Berlin, Heidelberg : Springer Berlin Heidelberg , 2007 : 159 - 176 .
ZHANG W T , BAO Z Z , RIJMEN V , et al . A new classification of 4-bit optimal S-boxes and its application to PRESENT, RECTANGLE and SPONGENT [C ] // Fast Software Encryption . Berlin : Springer , 2015 : 494 - 515 .
BOŽILOV D , BILGIN B , ALI SAHIN H . A note on 5-bit quadratic permutations' classification [J ] . IACR Transactions on Symmetric Cryptology , 2017 , 2017( 1 ): 398 - 404 .
DE MEYER L , BILGIN B . Classification of balanced quadratic functions [J ] . IACR Transactions on Symmetric Cryptology , 2019 : 169 - 192 .
赵耿 , 马英杰 , 陈磊 , 等 . 基于扰动时空混沌系统的动态S盒设计 [J ] . 电子学报 , 2022 , 50 ( 8 ): 2037 - 2042 .
ZHAO G , MA Y J , CHEN L , et al . Design of dynamic S-box based on perturbed spatiotemporal chaotic system [J ] . Acta Electronica Sinica , 2022 , 50 ( 8 ): 2037 - 2042 . (in Chinese)
柴进晋 , 吴暄 . 一种抗错误注入攻击的S盒的构造 [J ] . 电子学报 , 2023 , 51 ( 12 ): 3422 - 3430 .
CHAI J J , WU X . Construction of fault injection attacks resistant S-boxes [J ] . Acta Electronica Sinica , 2023 , 51 ( 12 ): 3422 - 3430 . (in Chinese)
KO S . Optimizing S-Box implementations for several criteria using SAT solvers [M ] // Lecture Notes in Computer Science . Berlin : Springer , 2016 : 140 - 160 .
RASOOLZADEH S . Low-latency boolean functions and bijective S-boxes [J ] . IACR Transactions on Symmetric Cryptology , 2022 ( 3 ): 403 - 447 .
0
浏览量
11
下载量
0
CSCD
关联资源
相关文章
相关作者
相关机构
京公网安备11010802024621