Cryptology ePrint Archive: Report 2017/630

Gimli: a cross-platform permutation

Daniel J. Bernstein and Stefan Kölbl and Stefan Lucks and Pedro Maat Costa Massolino and Florian Mendel and Kashif Nawaz and Tobias Schneider and Peter Schwabe and François-Xavier Standaert and Yosuke Todo and Benoît Viguier

Abstract: This paper presents Gimli, a 384-bit permutation designed to achieve high security with high performance across a broad range of platforms, including 64-bit Intel/AMD server CPUs, 64-bit and 32-bit ARM smartphone CPUs, 32-bit ARM microcontrollers, 8-bit AVR microcontrollers, FPGAs, ASICs without side-channel protection, and ASICs with side-channel protection.

Category / Keywords: implementation / Intel, AMD, ARM Cortex-A, ARM Cortex-M, AVR, FPGA, ASIC, side channels, the eyes of a hawk and the ears of a fox

Original Publication (with major differences): IACR-CHES-2017

Date: received 26 Jun 2017, last revised 27 Jun 2017

Contact author: b viguier at cs ru nl

Available format(s): PDF | BibTeX Citation

Note: Version submitted at CHES 2017 + Appendices

Version: 20170627:195621 (All versions of this report)

Short URL:

Discussion forum: Show discussion | Start new discussion

[ Cryptology ePrint archive ]