Paper 2019/906

Efficient and secure software implementations of Fantomas

Rafael J. Cruz, Antonio Guimarães, and Diego F. Aranha


In this paper, the efficient software implementation and side-channel resistance of the LS-Design construction is studied through a series of software implementations of the Fantomas block cipher, one of its most prominent instantiations. Target platforms include resource-constrained ARM devices like the Cortex-M3 and M4, and more powerful processors such as the ARM Cortex-A15 and modern Intel platforms. The implementations span a broad range of characteristics: 32-bit and 64-bit versions, unprotected and side-channel resistant, and vectorized code for NEON and SSE instruction sets. Our results improve the state of the art substantially, both in terms of efficiency and compactness, by making use of novel algorithmic techniques and features specific to the target platform. We finish by proposing and prototyping instruction set extensions to reduce by half the performance penalty of the introduced side-channel countermeasures.

Available format(s)
Publication info
Published elsewhere. Minor revision.Journal of Cryptographic Engineering
LS-DesignFantomasside-channel resistancevectorizationinstruction set extension
Contact author(s)
dfaranha @ eng au dk
2019-08-08: received
Short URL
Creative Commons Attribution


      author = {Rafael J.  Cruz and Antonio Guimarães and Diego F.  Aranha},
      title = {Efficient and secure software implementations of Fantomas},
      howpublished = {Cryptology ePrint Archive, Paper 2019/906},
      year = {2019},
      note = {\url{}},
      url = {}
Note: In order to protect the privacy of readers, does not use cookies or embedded third party content.