### FOAM: Searching for Hardware-Optimal SPN Structures and Components with a Fair Comparison

Khoongming Khoo, Thomas Peyrin, Axel Y. Poschmann, and Huihui Yap

##### Abstract

In this article, we propose a new comparison metric, the figure of adversarial merit (FOAM), which combines the inherent security provided by cryptographic structures and components with their implementation properties. To the best of our knowledge, this is the first such metric proposed to ensure a fairer comparison of cryptographic designs. We then apply this new metric to meaningful use cases by studying Substitution-Permutation Network permutations that are suited for hardware implementations, and we provide new results on hardware-friendly cryptographic building blocks. For practical reasons, we considered linear and differential attacks and we restricted ourselves to fully serial and round-based implementations. We explore several design strategies, from the geometry of the internal state to the size of the S-box, the field size of the diffusion layer or even the irreducible polynomial defining the finite field. We finally test all possible strategies to provide designers an exhaustive approach in building hardware-friendly cryptographic primitives (according to area or FOAM metrics), also introducing a model for predicting the hardware performance of round-based or serial-based implementations. In particular, we exhibit new diffusion matrices (circulant or serial) that are surprisingly more efficient than the current best known, such as the ones used in AES, LED and PHOTON.

Available format(s)
Category
Implementation
Publication info
A minor revision of an IACR publication in CHES 2014
Keywords
SPNlightweight cryptographyfigure of adversarial meritdiffusion matrices.
Contact author(s)
thomas peyrin @ ntu edu sg
History
2015-04-19: last of 3 revisions
See all versions
Short URL
https://ia.cr/2014/530

CC BY

BibTeX

@misc{cryptoeprint:2014/530,
author = {Khoongming Khoo and Thomas Peyrin and Axel Y.  Poschmann and Huihui Yap},
title = {FOAM: Searching for Hardware-Optimal SPN Structures and Components with a Fair Comparison},
howpublished = {Cryptology ePrint Archive, Paper 2014/530},
year = {2014},
note = {\url{https://eprint.iacr.org/2014/530}},
url = {https://eprint.iacr.org/2014/530}
}

Note: In order to protect the privacy of readers, eprint.iacr.org does not use cookies or embedded third party content.