Skip to main content

Questions tagged [lightweight]

Small and/or fast ciphers and other cryptographic primitives designed for use in constrained environments, such as embedded MCUs and smart cards.

Filter by
Sorted by
Tagged with
1 vote
1 answer
44 views

Is there a 4 by 4 NMDS matrix which is better than M= [[0,1,1,1], [1,0,1,1], [1,1,0,1], [1,1,1,0]] used in MIDORI?

Let $$M= \begin{bmatrix}0&1&1&1\\ 1&0&1&1\\ 1&1&0&1\\ 1&1&1&0\end{bmatrix}$$ which is used in the block ciphers MIDORI and MANTIS. Of course this matrix ...
Kurious Koder's user avatar
0 votes
1 answer
69 views

Lightweight length preserving encryption

I'm in need of an encryption algorithm that can be easily implemented in c, doesn't drastically increase the size of the encrypted data (the data to be encrypted will be approximately 200 bytes and ...
Hristos's user avatar
0 votes
0 answers
189 views

Speed comparison of encryption algorithms

I am trying to compare various encryption algorithms in terms of encryption duration, decryption duration, information entropy, NPCR, UACI, and correlation coefficients. I used a Lena 256x256 ...
ysnky's user avatar
  • 1
2 votes
1 answer
201 views

Where can I find a clear diagram of the SPECK algorithm?

Where can I find a clear algorithm diagram of SPECK algorithm? I want to follow steps to write ARM assembly code.
A A's user avatar
  • 21
11 votes
1 answer
2k views

What are the drawbacks of "lightweight crypto"?

Last year I learned about another NIST competition. https://csrc.nist.gov/projects/lightweight-cryptography/finalists And I thought to myself: "why would I continue to use heavyweight ...
Timur Timak's user avatar
7 votes
1 answer
222 views

What is the status of the NIST Lightweight Cryptography Standardisation Process?

The NIST Computer Security Resource Center called for nominations for a process to standardise lightweight symmetric primitives in August 2018. In the update talk in the 2019 Lightweight Cryptography ...
Daniel S's user avatar
  • 24.1k
1 vote
0 answers
93 views

What is the simplest way to implement data encryption for Raspberry PI project that communicate through Bluetooth? [closed]

I have developed a project based on Raspberry Pi that communicates through Bluetooth with Android application, My idea is to enhance its privacy through encryption. So, I've tried ...
Bhargav - Retarded Skills's user avatar
1 vote
1 answer
210 views

How to obtain inverse key stream efficiently on Present cipher?

I was taking a look at the PRESENT lightweight cipher presented here. You can see an implementation of it in Python here. It is basically a Substitution-Permutation (SP) cipher with ultra-lightweight ...
tur11ng's user avatar
  • 962
1 vote
0 answers
56 views

How one can combine shift row and mix column to form a single matrix?

I am trying to combine the effect the shift row and mix column into a single matrix. The cipher that I am working with is skinny64 (untweaked version). I know that combining the effect of these two ...
Muhammad Awais's user avatar
2 votes
3 answers
723 views

NIST vs ISO Encryption standardisation process

skinny cipher has been lately considered as ISO/IEC standard while is still competing as building block of Romulus AEAD in NIST LWC finalists. what is the difference between the two ISO and NIST ...
hardyrama's user avatar
  • 2,136
5 votes
1 answer
1k views

NIST LWC finalists (AEAD) vs ChaCha20-Poly1305

NIST LWC finalists announced. My question is that how finalists are faster or slower than current golden lightweight AEAD standard -- ChaCha20-Poly1305. Some benchmark among chacha20-poly1305 vs LWC ...
jannik's user avatar
  • 53
1 vote
0 answers
304 views

Lightweight encrypting for BLE advertising packets

I'm new to encryption and this is my first time working with it. I'm currently working on a home project which consists of the equipment in my garage to be attached with a BLE device which sends ...
nbafanatic's user avatar
4 votes
2 answers
195 views

Why does TinyJAMBU-128 claim only 112-bit security?

I am trying to understand the security level of TinyJAMBU-128. As shown in Table 4.1 page 12 of this document, TinyJAMBU-128 claims 112-bit security. However, it has a 128-bit key. How have we lost 16 ...
user's user avatar
  • 183
3 votes
0 answers
191 views

Does the security proof of HMAC somehow change if it's instantiated with sponge-based hash functions with small rate and large capacity?

HMAC was introduced in [1], as a MAC that has its security proof based on the properties on the underlaying hash function. The hash functions considered in that paper were ones based on the Merkle-...
DannyNiu's user avatar
  • 9,451
2 votes
1 answer
249 views

How to check that an $km \times km$ block-binary matrix is an MDS matrix in $k$-bit words over $\operatorname{GF}(2)$

I have been reading about MDS matrices. It is defined as (paraphrased from Section 2.1) An $n \times n$ matrix $M$ is MDS if and only if $bn(M) = n + 1$ where $bn$ (branch number) is defined as: $bn(...
hola's user avatar
  • 603
1 vote
0 answers
109 views

Does there exist a test vector for the Xoodoo permutation?

What I need is a set of pairs, where the first element of the pair is a 384-bit input (including the sequence of 384 zero bits) and the second element is a corresponding 384-bit output of the Xoodoo ...
lyrically wicked's user avatar
0 votes
0 answers
61 views

How to justify the lightweight symmetric PRESENT encryption algorithm is more secure?

My domain is VLSI design, currently, I'm working on PRESENT Lightweight cryptographic algorithm. I want to know how to improve the security of the algorithm rather than increasing bit size? Is there ...
Sunitha Tappari's user avatar
1 vote
1 answer
87 views

What's the least computationally expensive way to verify a message is from who they say they are?

We're building an ingame GPS system where only 5 lines of code are executed a second. We're starting to face problems with people spoofing the satellites we use to triangulate. Is it feasible to ...
AlexAndHisScripts's user avatar
2 votes
0 answers
36 views

Unknown bit in the output of encryption of data using SIMECK32 cipher?

How is the unknown bits (annotated by red arrow in figure below) come in the OUTPUT after round 1 and round 2 ? Following is the pictorial representation of SIMECK round function operation. Ref: ...
ironman's user avatar
  • 121
1 vote
1 answer
94 views

Understanding Fourier Coefficient

In Bogdanov's and others, PRESENT: An Ultra-Lightweight Block Cipher, they mention that the S-box in PRESENT fulfill four primary conditions. They denote the Fourier coefficient as $$S_b^W (a) = \sum_{...
jvargas's user avatar
  • 11
0 votes
0 answers
68 views

Where can I find standardized implementations of lightweight cryptographic ciphers?

I am working on a project that requires encrypting messages with different ciphers. I am looking for the following ciphers: PRESENT, CLEFIA, LEA, Hill cipher, Affine cipher, Elliptic Curve ...
NotNotLogic's user avatar
1 vote
0 answers
58 views

Lightweight provably secure design [closed]

Is it possible to device lightweight (i.e. without asymmetric crypto and PKI; and without third party Trent) provably secure (in the exact security sense) scheme? Were there any attempts? Is it ...
Kirill Tsar.'s user avatar
1 vote
1 answer
256 views

Definition of diffusion matrix

I've been studying this article and since I'm not studying cryptography in English and it is not my native language, I don't understand some of the terminology. More precisely: what are diffusion ...
kytka's user avatar
  • 13
2 votes
1 answer
117 views

Does anyone know an easily creatable asymmetric cryptosystem for usage in VDF?

I've read multiple papers about VDFs (1, 2, etc.). I look for a lighter alternative to El-Gamal regarding cryptosystem creation. It can be anything exotic too, but it would be nice to have at least ...
vvwccgz4lh's user avatar
11 votes
1 answer
1k views

CAESAR finalists: Lightweight case (Ascon vs ACORN)

The Ascon cipher has been selected as the first choice in lightweight case and ACORN as the second. However according to Face-off between the CAESAR Lightweight Finalists: ACORN vs. Ascon paper, the ...
hardyrama's user avatar
  • 2,136
2 votes
0 answers
78 views

Why commutativity gives an invariant subspace?

In A Generic Approach to Invariant Subspace Attacks the authors defined an invariant subspace as: $$F(u + A) = v + A$$ Where $F:\mathbb{F}_2^n \to \mathbb{F}_2^n$,$u, v \in \mathbb{F}_2^n$, and $A$ ...
A Square's user avatar
0 votes
0 answers
55 views

Most energy-efficient authentication protocol?

I am looking for a cryptographic protocol that is as energy-efficient as possible. I am talking about battery drain. Alice wants to do a mutual authentication with Bob. Maybe symmetric is good, maybe ...
Bob's user avatar
  • 1
3 votes
1 answer
173 views

Are there recommended modes of operation for lightweight ciphers?

There are many recommended modes of operation for block ciphers as described by NIST here, e.g. for DES and AES. However, I am struggling to find any for lightweight ciphers. I am particularly ...
Red Book 1's user avatar
  • 1,025
4 votes
3 answers
473 views

In what cases might PRESENT be implemented as encryption-only?

In the paper, under section 4.1 Goals and environment of use we read: In applications that demand the most efficient use of space, the block cipher will often only be implemented as encryption-only. ...
Red Book 1's user avatar
  • 1,025
3 votes
1 answer
122 views

Could we use a more efficient hash for signature generation?

Is it possible to use a more efficient hash - such as one based on GHASH - instead of a cryptographic hash for signature generation? In other words, could a combination of a fast hash and the private ...
Maarten Bodewes's user avatar
  • 93.3k
1 vote
0 answers
256 views

What lightweight cryptographic hash function for short input could I use for HMAC? [closed]

I am looking for a cryptographic hash function that I can configure for HMAC. The input that I will hash is around 50 bytes. The function must be fast, and computationally lightweight.
Ninja Bug's user avatar
  • 319
3 votes
0 answers
338 views

Is CLEFIA block cipher really lightweight? [closed]

CLEFIA is ISO/IEC 29192-2 standard in lightweight cryptography. According to this, the total GE area (I took the minimum) using .13 um is 2,488 (encryption mode) compared to piccolo-128 with GE area ...
hardyrama's user avatar
  • 2,136
1 vote
0 answers
84 views

Practical application of lightweight block cipher

Are any lightweight block cipher ciphers adopted in real-time? If yes, what cipher and which application?
ShanRe's user avatar
  • 39
4 votes
1 answer
97 views

Lightweight primality certificates for untrusted DH parameters

Are there any light-weight techniques to generate primality certificates for custom Diffie–Hellman parameters that could be sent to the client to allow it to verify primality without needing to run ...
forest's user avatar
  • 15.3k
4 votes
1 answer
517 views

Is there a lower cost cryptography than elliptic-curves based cryptography?

ECC requires less CPU power, less memory and shorter keys than RSA or any other asymmetric cryptography I came across in the literature (correct me if I am wrong). Is there a lower cost asymmetric ...
yushaa4dz's user avatar
9 votes
4 answers
4k views

Lightweight cipher using only 8-bit operations

What is the most efficient (in cycles per byte) cryptographically secure symmetric cipher to implement using only 8-bit operations? Algorithms like TEA are great for embedded devices, but it is ...
forest's user avatar
  • 15.3k
-1 votes
1 answer
72 views

Is there any dedicated research group which is working in energy efficient cryptographic functions? [closed]

Is there any dedicated research group which is working in energy efficient cryptographic functions for mobile devices. In mobile devices other than tuning a frequency/voltage, network speed any other ...
CGT's user avatar
  • 11
1 vote
1 answer
250 views

How does the PRESENT cipher's permutation affect all rounds when it repeats after every three rounds?

I heard that the permutation in PRESENT affects all bits after only a few rounds. However, when I looked at it the bits return to their original position after only three rounds. For example, in round-...
Red Book 1's user avatar
  • 1,025
-1 votes
1 answer
187 views

What is the difference between lightweight tweakable block cipher and tweakable block cipher?

What is the difference between lightweight tweakable block cipher and tweakable block cipher? For example, lightweight tweakable block cipher is SKINNY family, and tweakable block cipher is Threefish ...
Petr's user avatar
  • 3
7 votes
3 answers
1k views

Standard lightweight one-way hash functions for IoT devices

What are the standard lightweight one-way hash functions used in current Internet of Things devices? I could find some proposal of hash functions in conference papers but I want to know the ones ...
Shridhar R Kulkarni's user avatar
9 votes
2 answers
537 views

What is the official, generally accepted definition of "lightweight crypto"?

I frequently stumble upon the term "lightweight crypto". It tends to be used is a for special algorithms that use less resources, for constrained systems. Yet, it's somewhat unclear to me ...
e-sushi's user avatar
  • 18k
3 votes
0 answers
122 views

mCrypton - does anyone know where I can find test vectors or a reference implementation?

I am currently writing an implementation of the mCrypton lightweight block cipher (as presented in this paper). Unfortunately, the authors do not provide any test vectors. I tried to contact the ...
Huljar's user avatar
  • 31
1 vote
0 answers
235 views

Test vectors for Piccolo algorithm?

I'm looking for Test Vectors to test my implementation of PICCOLO. I would like to test a different input from the usual where the key and the plaintext are either 000..000 or FFF...FFF. I wrote ...
Aleksandra Arsić's user avatar
2 votes
1 answer
110 views

Reduced variants of stream ciphers

What are "reduced variants" of stream ciphers and how do they relate to lightweight cryptography? How do their internal states compare to those of non-reduced variants? Security aspects?
Roman Volkov's user avatar
6 votes
1 answer
334 views

What are the advantages of MICKEY over Trivium and Grain?

These three stream ciphers were chosen for the final hardware profile of the eSTREAM portfolio. As far as I understand it, their merits are: Trivium: elegant design, very high throughput per area, ...
Thomas Prest's user avatar
  • 1,080
0 votes
1 answer
150 views

Why is symmetric lightweight crypto only about block ciphers and not about stream ciphers?

Why is symmetric lightweight cryptography only about block ciphers and not about stream ciphers? AFAIK stream cipher implementations cost at least three times less than block cipher ones?
benia's user avatar
  • 83
6 votes
1 answer
2k views

Generating an IV for AES-CBC

I am faced with the task of generating a secure 256-bit IV for AES-CBC. I possess the following resources: A 32-bit microprocessor A 32-bit PRNG (can read/reseed) A 64-bit clock counter (can read) ...
user907323's user avatar
5 votes
3 answers
5k views

Lightweight Asymmetric encryption algorithm

I'm an embedded systems researcher, and new in the crypto field. Actually, I need to know if there are any lightweight asymmetric encryption algorithm especially considering the time needed for key ...
a.refaat's user avatar
2 votes
0 answers
751 views

Lightweight Cryptography and Gate Equivalents [closed]

If I design a lightweight cryptographic algorithm, how do I calculate gate equivalents (GE)?
Sofyan Reza Ferianto's user avatar
1 vote
0 answers
168 views

Differential Cryptanalysis [closed]

How do I find the differential characteristics using techniques Shrinking ? How do I extract the key on Differential Cryptanalysis using the technique Shrinking in Blockcipher Algorithm? Shrinking ...
Sofyan Reza Ferianto's user avatar