Abstract
The domain of lightweight cryptography focuses on cryptographic algorithms for extremely constrained devices. It is very costly to avoid nonce reuse in such environments, because this requires either a hardware source of randomness, or non-volatile memory to store a counter. At the same time, a lot of cryptographic schemes actually require the nonce assumption for their security. In this paper, we propose APE as the first permutation-based authenticated encryption scheme that is resistant against nonce misuse. We formally prove that APE is secure, based on the security of the underlying permutation. To decrypt, APE processes the ciphertext blocks in reverse order, and uses inverse permutation calls. APE therefore requires a permutation that is both efficient for forward and inverse calls. We instantiate APE with the permutations of three recent lightweight hash function designs: Quark, Photon, and Spongent. For any of these permutations, an implementation that supports both encryption and decryption requires less than 1.9 kGE and 2.8 kGE for 80-bit and 128-bit security levels, respectively.
Original language | English |
---|---|
Title of host publication | Revised Selected Papers of the 21st International Workshop Fast Software Encryption (FSE 2014) |
Editors | Carlos Cid, Christian Rechberger |
Publisher | Springer |
Publication date | 2015 |
Pages | 168-186 |
ISBN (Print) | 978-3-662-46705-3 |
ISBN (Electronic) | 978-3-662-46706-0 |
DOIs | |
Publication status | Published - 2015 |
Event | 21st International Workshop Fast Software Encryption (FSE 2014) - London, United Kingdom Duration: 3 Mar 2014 → 5 Mar 2014 Conference number: 21 http://fse2014.isg.rhul.ac.uk/ |
Workshop
Workshop | 21st International Workshop Fast Software Encryption (FSE 2014) |
---|---|
Number | 21 |
Country/Territory | United Kingdom |
City | London |
Period | 03/03/2014 → 05/03/2014 |
Internet address |
Series | Lecture Notes in Computer Science |
---|---|
Volume | 8540 |
ISSN | 0302-9743 |
Keywords
- APE
- Authenticated encryption
- Sponge function
- Online
- Deterministic
- Permutation-based
- Misuse resistant