TY - GEN
T1 - PRINCE - A Low-Latency Block Cipher for Pervasive Computing Applications: Extended Abstract
AU - Borghoff, J.
AU - Canteaut, Anne Michele
AU - Guneysu, T.
AU - Kavun, E.B.
AU - Knezevic, M.
AU - Knudsen, Lars Ramkilde
AU - Leander, Gregor
AU - Nikov, V.
AU - Paar, C.
AU - Rechberger, Christian
PY - 2012
Y1 - 2012
N2 - his paper presents a block cipher that is optimized with respect to latency when implemented in hardware. Such ciphers are desirable for many future pervasive applications with real-time security needs. Our cipher, named PRINCE, allows encryption of data within one clock cycle with a very competitive chip area compared to known solutions. The fully unrolled fashion in which such algorithms need to be implemented calls for innovative design choices. The number of rounds must be moderate and rounds must have short delays in hardware. At the same time, the traditional need that a cipher has to be iterative with very similar round functions disappears, an observation that increases the design space for the algorithm. An important further requirement is that realizing decryption and encryption results in minimum additional costs. PRINCE is designed in such a way that the overhead for decryption on top of encryption is negligible. More precisely for our cipher it holds that decryption for one key corresponds to encryption with a related key. This property we refer to as α-reflection is of independent interest and we prove its soundness against generic attacks.
AB - his paper presents a block cipher that is optimized with respect to latency when implemented in hardware. Such ciphers are desirable for many future pervasive applications with real-time security needs. Our cipher, named PRINCE, allows encryption of data within one clock cycle with a very competitive chip area compared to known solutions. The fully unrolled fashion in which such algorithms need to be implemented calls for innovative design choices. The number of rounds must be moderate and rounds must have short delays in hardware. At the same time, the traditional need that a cipher has to be iterative with very similar round functions disappears, an observation that increases the design space for the algorithm. An important further requirement is that realizing decryption and encryption results in minimum additional costs. PRINCE is designed in such a way that the overhead for decryption on top of encryption is negligible. More precisely for our cipher it holds that decryption for one key corresponds to encryption with a related key. This property we refer to as α-reflection is of independent interest and we prove its soundness against generic attacks.
U2 - 10.1007/978-3-642-34961-4_14
DO - 10.1007/978-3-642-34961-4_14
M3 - Article in proceedings
SN - 978-3-642-34960-7
T3 - Lecture Notes in Computer Science
SP - 208
EP - 225
BT - Advances in Cryptology – ASIACRYPT 2012
PB - Springer
T2 - 18th International Conference on the Theory and Application of Cryptology and Information Security
Y2 - 2 December 2012 through 6 December 2012
ER -