Cryptology ePrint Archive: Report 2017/1084

Lightweight MDS Serial-type Matrices with Minimal Fixed XOR Count (Full version)

Dylan Toh and Jacob Teo and Khoongming Khoo and Siang Meng Sim

Abstract: Many block ciphers and hash functions require the diffusion property of Maximum Distance Separable (MDS) matrices. Serial matrices with the MDS property obtain a trade-off between area requirement and clock cycle performance to meet the needs of lightweight cryptography. In this paper, we propose a new class of serial-type matrices called Diagonal-Serial Invertible (DSI) matrices with the sparse property. These matrices have a fixed XOR count (contributed by the connecting XORs) which is half that of existing matrices. We prove that for matrices of order 4, our construction gives the matrix with the lowest possible fixed XOR cost. We also introduce the Reversible Implementation (RI) property, which allows the inverse matrix to be implemented using the similar hardware resource as the forward matrix, even when the two matrices have different finite field entries. This allows us to search for serial-type matrices which are lightweight in both directions by just focusing on the forward direction. We obtain MDS matrices which outperform existing lightweight (involutory) matrices.

Category / Keywords: MDS matrix, Serial matrix, lightweight cryptography, XOR count

Original Publication (with minor differences): AFRICACRYPT 2018

Date: received 7 Nov 2017, last revised 27 Feb 2018

Contact author: ssim011 at e ntu edu sg

Available format(s): PDF | BibTeX Citation

Version: 20180227:103703 (All versions of this report)

Short URL:

[ Cryptology ePrint archive ]