RECTANGLE: A Bit-slice Ultra-Lightweight Block Cipher Suitable for Multiple Platforms
RECTANGLE: A Bit-slice Ultra-Lightweight Block Cipher Suitable for Multiple Platforms
复制标题
DOI：
--
复制
发表时间：
2014
期刊：
影响因子：
--
通讯作者：
Wentao Zhang;Zhenzhen Bao;D. Lin;V. Rijmen;Bohan Yang;I. Verbauwhede
中科院分区：
文献类型：
--
作者：
Wentao Zhang;Zhenzhen Bao;D. Lin;V. Rijmen;Bohan Yang;I. Verbauwhede
在本文中，我们提出了一种新的轻量级分组密码，名为 RECTANGLE。 RECTANGLE 设计的主要思想是允许使用位片技术进行轻量级且快速的实现。 RECTANGLE 使用 SP 网络。替换层由 16 个并联的 4×4 S 盒组成。置换层由3次旋转组成。如本文所示，RECTANGLE 在硬件和软件环境上都提供了出色的性能，这证明了针对不同应用场景的足够的灵活性。以下是 RECTANGLE 的 3 个主要优点。首先，RECTANGLE 对硬件非常友好。对于 80 位密钥版本，每轮一个周期的并行实现仅需要 1467 个门，即可在 100KHz 时钟下实现 246 Kbits/sec 的吞吐量和 1.11 pJ/bit 的能效。其次，由于其位片风格，RECTANGLE 在现有的轻量级分组密码中实现了非常有竞争力的软件速度。使用 128 位 SSE 指令，RECTANGLE 的位片实现对于 1000 字节左右的消息达到约 5.38 周期/字节的平均加密速度。最后但并非最不重要的。我们提出了 4×4 S 盒的新设计标准。 RECTANGLE就使用了这样一种新型的S-box。由于我们对S盒的精心选择和排列层的非对称设计，RECTANGLE实现了非常好的安全性能权衡。我们广泛而深入的安全分析仅发现最多 14 轮的区别，而我们可以攻击的最高轮数为 18（共 25 轮）。
In this paper, we propose a new lightweight block cipher named RECTANGLE. The main idea of the design of RECTANGLE is to allow lightweight and fast implementations using bit-slice techniques. RECTANGLE uses an SPnetwork. The substitution layer consists of 16 4×4 S-boxes in parallel. The permutation layer is composed of 3 rotations. As shown in this paper, RECTANGLE offers great performance in both hardware and software environment, which proves enough flexibility for different application scenario. The following are 3 main advantages of RECTANGLE. First, RECTANGLE is extremely hardwarefriendly. For the 80-bit key version, a one-cycle-per-round parallel implementation only needs 1467 gates for a throughput of 246 Kbits/sec at 100KHz clock and an energy efficiency of 1.11 pJ/bit. Second, RECTANGLE achieves a very competitive software speed among the existing lightweight block ciphers due to its bit-slice style. Using 128-bit SSE instructions, a bit-slice implementation of RECTANGLE reaches an average encryption speed of about 5.38 cycles/byte for messages around 1000 bytes. Last but not least. We propose new design criteria for 4×4 S-boxes. RECTANGLE uses such a new type of S-box. Due to our careful selection of the S-box and the asymmetric design of the permutation layer, RECTANGLE achieves a very good security-performance tradeoff. Our extensive and deep security analysis finds distinguishers for up to 14 rounds only, and the highest number of rounds that we can attack, is 18 (out of 25).