Pushing the Limits: A Very Compact and a Threshold Implementation of AES

By Amir Moradi, Axel York Poschmann, San Ling, Christof Paar, Huaxiong Wang. International Conference on the Theory and Application of Cryptographic Techniques, 2011

495 citations recorded by the source corpus.

Subfields: Artificial Intelligence, Hardware and Architecture, Signal Processing

View Paper: https://www.semanticscholar.org/paper/566d45e8d4f2d2107124dfd5a11c332f472186d9

How researchers see this paper

The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.

In Artificial Intelligence

In Hardware and Architecture

In Signal Processing

Citations in the corpus

Midori: A Block Cipher for Low Energy (2015, background): “The past few years have seen several low-power/area architectures for AES being reported in literature [28,31,18].”
The LED Block Cipher (2011, background): “This is the initial value of the cipher state and note that the state (and the key) are loaded row-wise rather than in the column-wise fashion we have come to expect from the AES; this is a more hardware-friendly choice, as pointed out in [38].”
RECTANGLE: a bit-slice lightweight block cipher suitable for multiple platforms (2015, background): “At size size Block μm (GE) 100KHz(Kbps) Block Ciphers AES-128[40] 128 128 226 0.”
Domain-Oriented Masking: Compact Masked Hardware Implementations with Arbitrary Protection Order (2016, methodology): “To compare the efficiency the DOM scheme with existing threshold implementations , we implemented different variants of the AES-128 encryption-only design suggested by Moradi and Poschmann [20].”
The SKINNY Family of Block Ciphers and its Low-Latency Variant MANTIS (2016, background): “This is the initial value of the cipher internal state and note that the state is loaded row-wise rather than in the column-wise fashion we have come to expect from the AES; this is a more hardware-friendly choice, as pointed out in [24].”
Lightweight Cryptography Algorithms for Resource-Constrained IoT Devices: A Review, Comparison and Research Opportunities (2021, methodology): “The minimum GE requirement recorded for AES is around 2400 GEs (23% smaller than the usual one) [50], which is still heavy for some small scale real-time applications [35].”
SIMON and SPECK: Block Ciphers for the Internet of Things (2015, methodology): “ASIC implementations of AES-128 have been developed with an area of just 2400 gate equivalents (GE) [41] and fast software implementations are available for 8-bit [44] and 16-bit [21] microcontrollers.”
$\textnormal{\textsc{TWINE}}$ : A Lightweight Block Cipher for Multiple Platforms (2012, methodology): “4 1,000 n/a serial PRESENT [8] Enc 64 80 32 200 1,570 6 round AES [30] Enc 128 128 226 57 2,400 6 serial mCRYPTON [24] Enc 64 64 13 492.”
KLEIN: A New Family of Lightweight Block Ciphers (2010, unknown): “AES-128 [51] [24] [40] 0.”