VLSI hardware evaluation of the stream ciphers Salsa20 and ChaCha, and the compression function Rumba
VLSI hardware evaluation of the stream ciphers Salsa20 and ChaCha, and the compression function Rumba
复制标题
流密码 Salsa20 和 ChaCha 以及压缩函数 Rumba 的 VLSI 硬件评估
DOI：
10.1109/icscs.2008.4746906
复制
发表时间：
2008
期刊：
影响因子：
--
通讯作者：
W. Fichtner
中科院分区：
文献类型：
--
作者：
L. Henzen;F. Carbognani;N. Felber;W. Fichtner
Salsa20是eSTREAM项目面向软件的配置文件中的流密码候选。ChaCha是一种后继流密码，具有改进的每轮扩散，并且推测增加了对密码分析的抵抗力。Rumba基于四个Salsa20实例的组合，是一个用于散列方案的压缩函数。本文介绍了Salsa20的五种VLSI电路的评估。0.18 μ m CMOS技术的综合结果表明，最快的实现实现了6.4Gbps的吞吐量，而最小的设计在16 Mbps时只需要10k栅极当量（GE）的面积。本文还介绍了ChaCha和Rumba的第一个硬件实现。最快的ChaCha设计达到6.8 Gbps，最小的设计在16 Mbps时需要9.1 kGE的面积。此外，两种Rumba实现能够在12 Mbps时实现17.9 Gbps或16.8 kGE的紧凑区域。
Salsa20 is a stream cipher candidate in the software-oriented profile of the eSTREAM project. ChaCha is a successor stream cipher with improved per round diffusion and, conjecturally, increased resistance to cryptanalysis. Based on the combination of four Salsa20 instances, Rumba is a compression function for hashing schemes. This paper presents the evaluation of five VLSI circuits for Salsa20. Synthesis results for a 0.18 mum CMOS technology point out that the fastest implementation achieves a throughput of 6.4Gbps, while the smallest design requires only an area of 10 k gate equivalents (GE) at 16 Mbps. This work also presents the first hardware implementations of ChaCha and Rumba. The fastest ChaCha design achieves 6.8 Gbps and the smallest design requires an area of 9.1 kGE at 16 Mbps. Furthermore, two Rumba implementations are able to achieve 17.9 Gbps or a compact area of 16.8 kGE at 12 Mbps.