Paper 2019/700

SAEB: A Lightweight Blockcipher-Based AEAD Mode of Operation

Yusuke Naito, Mitsuru Matsui, Takeshi Sugawara, and Daisuke Suzuki


Lightweight cryptography in computationally constrained devices is actively studied. In contrast to advances of lightweight blockcipher in the last decade, lightweight mode of operation is seemingly not so mature, yet it has large impact in performance. Therefore, there is a great demand for lightweight mode of operation, especially that for authenticated encryption with associated data (AEAD). Among many known properties of conventional modes of operation, the following four properties are essential for constrained devices: 1. Minimum State Size: the state size equals to a block size of a blockcipher. 2. Inverse Free: no need for a blockcipher decryption. 3. XOR Only: only XOR is needed in addition to a blockcipher encryption. 4. Online: a data block is processed only once. The properties 1 and 4 contribute to small memory usage, and the properties 2 and 3 contribute to small program/circuit footprint. On top of the above properties, the fifth property regarding associated data (AD) is also important for performance: 5. Efficient Handling of Static AD: static AD can be precomputed. We design a lightweight blockcipher-based AEAD mode of operation called SAEB: the first mode of operation that satisfies all the five properties to the best of our knowledge. Performance of SAEB is evaluated in various software and hardware platforms. The evaluation results show that SAEB outperforms conventional blockcipher-based AEAD modes of operation in various performance metrics for lightweight cryptography.

Note: Typos of Figure 2 are fixed from TCHES 2018 Issue 2.

Available format(s)
Secret-key cryptography
Publication info
A minor revision of an IACR publication in Tches 2018
Lightweight cryptographyblockciphemode of operation
Contact author(s)
Naito Yusuke @ ce mitsubishielectric co jp
2019-06-13: revised
2019-06-13: received
See all versions
Short URL
Creative Commons Attribution


      author = {Yusuke Naito and Mitsuru Matsui and Takeshi Sugawara and Daisuke Suzuki},
      title = {SAEB: A Lightweight Blockcipher-Based AEAD Mode of Operation},
      howpublished = {Cryptology ePrint Archive, Paper 2019/700},
      year = {2019},
      note = {\url{}},
      url = {}
Note: In order to protect the privacy of readers, does not use cookies or embedded third party content.