Paper 2016/927

Atomic-AES: A Compact Implementation of the AES Encryption/Decryption Core

Subhadeep Banik, Andrey Bogdanov, and Francesco Regazzoni


The implementation of the AES encryption core by Moradi et al. at Eurocrypt 2011 is one of the smallest in terms of gate area. The circuit takes around 2400 gates and operates on an 8 bit datapath. However this is an encryption only core and unable to cater to block cipher modes like CBC and ELmD that require access to both the AES encryption and decryption modules. In this paper we look to investigate whether the basic circuit of Moradi et al. can be tweaked to provide dual functionality of encryption and decryption (ENC/DEC) while keeping the hardware overhead as low as possible. As a result, we report an 8-bit serialized AES circuit that provides the functionality of both encryption and decryption and occupies around 2645 GE with a latency of 226 cycles. This is a substantial improvement over the next smallest AES ENC/DEC circuit (Grain of Sand) by Feldhofer et al. which takes around 3400 gates but has a latency of over 1000 cycles for both the encryption and decryption cycles.

Available format(s)
Publication info
Published elsewhere. MINOR revision.Indocrypt 2016
Contact author(s)
bsubhadeep @ ntu edu sg
2016-09-24: received
Short URL
Creative Commons Attribution


      author = {Subhadeep Banik and Andrey Bogdanov and Francesco Regazzoni},
      title = {Atomic-AES: A Compact Implementation of the AES Encryption/Decryption Core},
      howpublished = {Cryptology ePrint Archive, Paper 2016/927},
      year = {2016},
      note = {\url{}},
      url = {}
Note: In order to protect the privacy of readers, does not use cookies or embedded third party content.