Paper 2017/1023

Several Masked Implementations of the Boyar-Peralta AES S-Box

Ashrujit Ghoshal and Thomas De Cnudde


Threshold implementation is a masking technique that provides provable security for implementations of cryptographic algorithms against power analysis attacks. In recent publications, several different threshold implementations of AES have been designed. However in most of the threshold implementations of AES, the Canright S-Box has been used. The Boyar-Peralta S-Box is an alternative implementation of the AES S-Box with a minimal circuit depth and is comparable in size to the frequently used Canright AES S-Box. In this paper, we present several versions of first-order threshold implementations of the Boyar-Peralta AES S-Box with different number of shares and several trade-offs in area, randomness and speed. To the best of our knowledge these are the first threshold implementations of the Boyar-Peralta S-Box. Our implementations compare favourably with some of the existing threshold implementations of Canright S-Box along the design trade-offs, e.g. while one of our S-Boxes is 49\% larger in area than the smallest known threshold implementation of the Canright AES S-Box, it uses 63\% less randomness and requires only 50\% of the clock cycles. We provide results of a practical security evaluation based on real power traces to confirm the first-order attack resistance of our implementations.

Available format(s)
Publication info
Published elsewhere. Indocrypt 2017: 18th International Conference on Cryptology in India.
AESBoyar-Peralta S-boxCountermeasureDPAMaskingSCAThreshold Implementations.
Contact author(s)
ashrujit ck @ gmail com
2018-08-22: last of 2 revisions
2017-10-25: received
See all versions
Short URL
Creative Commons Attribution


      author = {Ashrujit Ghoshal and Thomas De Cnudde},
      title = {Several Masked Implementations of the Boyar-Peralta AES S-Box},
      howpublished = {Cryptology ePrint Archive, Paper 2017/1023},
      year = {2017},
      note = {\url{}},
      url = {}
Note: In order to protect the privacy of readers, does not use cookies or embedded third party content.