Cryptology ePrint Archive: Report 2015/590
TriviA: A Fast and Secure Authenticated Encryption Scheme
Avik Chakraborti, Anupam Chattopadhyay, Muhammad Hassan, Mridul Nandi
Abstract: In this paper, we propose a new hardware friendly authen- ticated encryption (AE) scheme TriviA based on (i) a stream cipher for generating keys for the ciphertext and the tag, and (ii) a pairwise in- dependent hash to compute the tag. We have adopted one of the ISO- standardized stream ciphers for lightweight cryptography, namely Triv- ium, to obtain our underlying stream cipher. This new stream cipher has a state that is a little larger than the state of Trivium to accommodate a 128-bit secret key and IV. Our pairwise independent hash is also an adaptation of the EHC or “Encode-Hash-Combine” hash, that requires the optimum number of field multiplications and hence requires small hardware footprint. We have implemented the design in synthesizable RTL. Pre-layout synthesis, using 65 nm standard cell technology under typical operating conditions, reveals that TriviA is able to achieve a high throughput of 91.2 Gbps for an area of 24.4 KGE. We prove that our construction has at least 128-bit security for privacy and 124-bit security of authenticity under the assumption that the underlying stream cipher produces a pseudorandom bit stream.
Category / Keywords: secret-key cryptography / Trivium, stream cipher, authenticated encryption, pairwise independent, EHC, TriviA.
Original Publication (with minor differences): IACR-CHES-2015
Date: received 15 Jun 2015
Contact author: avikchkrbrti at gmail com
Available format(s): PDF | BibTeX Citation
Version: 20150621:162548 (All versions of this report)
Short URL: ia.cr/2015/590
Discussion forum: Show discussion | Start new discussion
[ Cryptology ePrint archive ]