International Association for Cryptologic Research

International Association
for Cryptologic Research

CryptoDB

Paper: Bit-Sliding: A Generic Technique for Bit-Serial Implementations of SPN-based Primitives

Authors:
Jérémy Jean
Amir Moradi
Thomas Peyrin
Pascal Sasdrich
Download:
DOI: 10.1007/978-3-319-66787-4_33
Search ePrint
Search Google
Conference: CHES 2017
Abstract: Area minimization is one of the main efficiency criterion for lightweight encryption primitives. While reducing the implementation data path is a natural strategy for achieving this goal, Substitution-Permutation Network (SPN) ciphers are usually hard to implement in a bit-serial way (1-bit data path). More generally, this is hard for any data path smaller than its Sbox size, since many scan flip-flops would be required for storage, which are more area-expensive than regular flip-flops.In this article, we propose the first strategy to obtain extremely small bit-serial ASIC implementations of SPN primitives. Our technique, which we call bit-sliding, is generic and offers many new interesting implementation trade-offs. It manages to minimize the area by reducing the data path to a single bit, while avoiding the use of many scan flip-flops.Following this general architecture, we could obtain the first bit-serial and the smallest implementation of AES-128 to date (1560 GE for encryption only, and 1738 GE for encryption and decryption with IBM 130 nm standard-cell library), greatly improving over the smallest known implementations (about 30% decrease), making AES-128 competitive to many ciphers specifically designed for lightweight cryptography. To exhibit the generality of our strategy, we also applied it to the PRESENT and SKINNY block ciphers, again offering the smallest implementations of these ciphers thus far, reaching an area as low as 1065 GE for a 64-bit block 128-bit key cipher. It is also to be noted that our bit-sliding seems to obtain very good power consumption figures, which makes this implementation strategy a good candidate for passive RFID tags.
BibTeX
@inproceedings{ches-2017-28942,
  title={Bit-Sliding: A Generic Technique for Bit-Serial Implementations of SPN-based Primitives},
  booktitle={Cryptographic Hardware and Embedded Systems – CHES 2017},
  series={Lecture Notes in Computer Science},
  publisher={Springer},
  volume={10529},
  pages={687-707},
  doi={10.1007/978-3-319-66787-4_33},
  author={Jérémy Jean and Amir Moradi and Thomas Peyrin and Pascal Sasdrich},
  year=2017
}