Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [lightweight]

Small and/or fast ciphers and other cryptographic primitives designed for use in constrained environments, such as embedded MCUs and smart cards.

3
votes
1answer
94 views

Are there recommended modes of operation for lightweight ciphers?

There are many recommended modes of operation for block ciphers as described by NIST here, e.g. for DES and AES. However, I am struggling to find any for lightweight ciphers. I am particularly ...
4
votes
3answers
399 views

In what cases might PRESENT be implemented as encryption-only?

In the paper, under section 4.1 Goals and environment of use we read: In applications that demand the most efficient use of space, the block cipher will often only be implemented as encryption-only. ...
3
votes
1answer
58 views

Could we use a more efficient hash for signature generation?

Is it possible to use a more efficient hash - such as one based on GHASH - instead of a cryptographic hash for signature generation? In other words, could a combination of a fast hash and the private ...
1
vote
0answers
63 views

What lightweight cryptographic hash function for short input could I use for HMAC?

I am looking for a cryptographic hash function that I can configure for HMAC. The input that I will hash is around 50 bytes. The function must be fast, and computationally lightweight.
3
votes
0answers
83 views

Is CLEFIA block cipher really lightweight? [closed]

CLEFIA is ISO/IEC 29192-2 standard in lightweight cryptography. According to this, the total GE area (I took the minimum) using .13 um is 2,488 (encryption mode) compared to piccolo-128 with GE area ...
1
vote
0answers
65 views

Practical application of lightweight block cipher

Are any lightweight block cipher ciphers adopted in real-time? If yes, what cipher and which application?
4
votes
1answer
52 views

Lightweight primality certificates for untrusted DH parameters

Are there any light-weight techniques to generate primality certificates for custom Diffie-Hellman parameters that could be sent to the client to allow it to verify primality without needing to run ...
3
votes
1answer
187 views

Is there a lower cost cryptography than elliptic-curves based cryptography?

ECC requires less CPU power, less memory and shorter keys than RSA or any other asymmetric cryptography I came across in the literature (correct me if I am wrong). Is there a lower cost asymmetric ...
5
votes
3answers
679 views

Lightweight cipher using only 8-bit operations

What is the most efficient (in cycles per byte) cryptographically secure symmetric cipher to implement using only 8-bit operations? Algorithms like TEA are great for embedded devices, but it is ...
1
vote
1answer
111 views

How does the PRESENT cipher's permutation affect all rounds when it repeats after every three rounds?

I heard that the permutation in PRESENT affects all bits after only a few rounds. However, when I looked at it the bits return to their original position after only three rounds. For example, in round-...
-1
votes
1answer
99 views

What is the difference between lightweight tweakable block cipher and tweakable block cipher?

What is the difference between lightweight tweakable block cipher and tweakable block cipher? For example, lightweight tweakable block cipher is SKINNY family, and tweakable block cipher is Threefish ...
6
votes
3answers
435 views

Standard lightweight one-way hash functions for IoT devices

What are the standard lightweight one-way hash functions used in current Internet of Things devices? I could find some proposal of hash functions in conference papers but I want to know the ones ...
8
votes
2answers
312 views

What is the official, generally accepted definition of “lightweight crypto”?

I frequently stumble upon the term "lightweight crypto". It tends to be used is a for special algorithms that use less resources, for constrained systems. Yet, it's somewhat unclear to me where to ...
3
votes
0answers
82 views

mCrypton - does anyone know where I can find test vectors or a reference implementation?

I am currently writing an implementation of the mCrypton lightweight block cipher (as presented in this paper). Unfortunately, the authors do not provide any test vectors. I tried to contact the ...
1
vote
0answers
128 views

Test vectors for Piccolo algorithm?

I'm looking for Test Vectors to test my implementation of PICCOLO. I would like to test a different input from the usual where the key and the plaintext are either 000..000 or FFF...FFF. I wrote ...
2
votes
1answer
88 views

Reduced variants of stream ciphers

What are "reduced variants" of stream ciphers and how do they relate to lightweight cryptography? How do their internal states compare to those of non-reduced variants? Security aspects?
5
votes
1answer
199 views

What are the advantages of MICKEY over Trivium and Grain?

These three stream ciphers were chosen for the final hardware profile of the eSTREAM portfolio. As far as I understand it, their merits are: Trivium: elegant design, very high throughput per area, ...
0
votes
1answer
98 views

Why is symmetric lightweight crypto only about block ciphers and not about stream ciphers?

Why is symmetric lightweight cryptography only about block ciphers and not about stream ciphers? AFAIK stream cipher implementations cost at least three times less than block cipher ones?
6
votes
1answer
649 views

Generating an IV for AES-CBC

I am faced with the task of generating a secure 256-bit IV for AES-CBC. I possess the following resources: A 32-bit microprocessor A 32-bit PRNG (can read/reseed) A 64-bit clock counter (can read) ...
0
votes
0answers
115 views

Lightest symmetric, fixed key, “Format preserving Encryption” algorithm?

message m = 49 bit string key k = any format but fixed Ciphertexts should be 49 bits long. Are there several "Format Preserving Encryption" algorithms? I want an algorithm that is as light as ...
2
votes
2answers
2k views

Lightweight Asymmetric encryption algorithm

I'm an embedded systems researcher, and new in the crypto field. Actually, I need to know if there are any lightweight asymmetric encryption algorithm especially considering the time needed for key ...
2
votes
0answers
281 views

Lightweight Cryptography and Gate Equivalents [closed]

If I design a lightweight cryptographic algorithm, how do I calculate gate equivalents (GE)?
1
vote
0answers
122 views

Differential Cryptanalysis [closed]

How do I find the differential characteristics using techniques Shrinking ? How do I extract the key on Differential Cryptanalysis using the technique Shrinking in Blockcipher Algorithm? Shrinking ...
18
votes
3answers
3k views

How is bitslicing faster?

I have read a paper on Bit Slicing and Lightweight crypto but cannot understand how bitslicing makes encryption scheme faster. Please can someone explain with an example exactly how bit slicing makes ...
3
votes
1answer
341 views

(Lightweight) Multicast one-way Authentication

Problem: I'm thinking about a lightweight solution to provide source authentication (only one source) to multiple receivers (multicast message). Context: Taking the problem to ground, we can think ...
4
votes
1answer
334 views

What is the lightweight key exchange protocol of choice?

Assume I have to implement a secure channel protocol by myself. Assume further that for some obscure reasons (library restrictions?) I can't use any of the pre-made libraries for SSH, TLS and such. ...
2
votes
1answer
656 views

CLEFIA vs AES 128-bit

I am running a comparison between CLEFIA(Lightweight cipher from Sony Corporation which is a standard now http://www.sony.net/Products/cryptography/clefia/standard/index.html) and AES 128-bit. The ...
1
vote
1answer
723 views

What is the most light-weight symmetric cipher thats still usefull?

I need a very light encryption scheme which costs almost no performance during encryption (while decryption may be slow). I found 5 algorithms: RC4, DES, LED, PRESENT, and Piccolo. But how do I ...
5
votes
1answer
315 views

Difference between lightweight, online and low memory Authenticated Encryption schemes

What is the basic difference between the following types of Authenticated Encryption (AE) schemes? Lightweight Authenticated encryption Online Authenticated Encryption Authenticated Encryption for ...
1
vote
1answer
839 views

Smart Card Basics

I want to implement some of the basic encryption algorithms on smart card, could any body guide me how to program a smart card, which tools (hardware and software) I should have, and if these tools ...
11
votes
2answers
1k views

Are there any signature schemes for underpowered devices (8-bit microcontroller)?

I am currently researching into a small scale home automation system, aiming for cost. The system architecture is basically one master and several slaves which are connected in parallel. Recently i'...
3
votes
1answer
357 views

A situation where security by obscurity might be the best solution - or am I wrong?

Imagine the following situation. There is an application for a microcontroller-driven system. The profits are made from manufacturing and selling the device itself. However, it is expected, that the ...
2
votes
1answer
2k views

HASH Algorithm for 8 bits MCU

I need to implement the HASH algorithm (MD5 & SHA-1) on an 8 bit MCU. I hear it can only be implemented on 32bit and sometimes 16bits MCU. Is that possible? I will appreciate link where possible. ...
10
votes
2answers
866 views

Can one implement AES on 4-bit microcontroller?

It is possible to implement AES on 4-bit microcontroller? As far as I know, AES on 8-bit microcontroller are common especially for light weight application such as the RFID. I have yet to come across ...