The provable constructive effect of diffusion switching mechanism in CLEFIA-type block ciphers

Qingju Wang,Andrey Bogdanov

DOI: https://doi.org/10.1016/j.ipl.2012.02.006

IF: 0.851

2012-01-01

Information Processing Letters

Abstract:CLEFIA is a block cipher designed by Sony Corporation, adopted as a lightweight encryption algorithm of the new ISO/IEC 29192-2 standard, and proposed as a Japanese e-Government recommendation cipher CRYPTREC candidate.

What problem does this paper attempt to address?

Differential power analysis attack on CLEFIA block cipher

Xuefei Bai,Lu Huang,Yao Wang,Yizhi Xu

DOI: https://doi.org/10.1109/CISE.2009.5364317

2009-01-01

Abstract:CLEFIA is a 128-bit block cipher designed newly by Sony Corporation. In this paper, a differential power analysis attack method on every byte of CLEFIA round keys is presented. Through this attack, the round keys can be obtained, and then the 128-bit encryption key can be calculated out. The results of simulation experiments indicate that this attack is effective and practical on the CLEFIA cipher. ©2009 IEEE.
A Reconfigurable and Compact Hardware Architecture of CLEFIA Block Cipher with Multi-Configuration.

Xin Cheng,Haowen Zhu,Yixuan Xu,Yongqiang Zhang,Hao Xiao,Zhang

DOI: https://doi.org/10.1016/j.mejo.2021.105144

IF: 1.992

2021-01-01

Microelectronics Journal

Abstract:In this paper, a reconfigurable architecture of CLEFIA block cipher which supports multi-configuration is proposed. Moreover, different generalized Feistel networks are integrated into a novel folding structure, which not only increases the circuit flexibility but also reduces the hardware overhead. Besides, the processes of generating intermediate key and encryption share the same circuit by time-division multiplexing technology to reduce the hardware resource consumption further. The proposed CLEFIA design is implemented in Artix-7 XC7A35 T FPGA board. Measurement results show that it can realize all the three CLEFIA configurations of key size, which are 128/192/256-bit, with a few resources of 1725 look-up-tables and 663 registers. At a clock frequency of 147 MHz, it also reaches high throughputs of 990 Mbps, 818 Mbps, and 696 Mbps in the three configurations respectively.
Improved Impossible Differential Cryptanalysis of CLEFIA.

Wei Wang,Xiaoyun Wang

2007-01-01

Abstract:This paper presents an improved impossible differential attack on the new block cipher CLEFIA which is proposed by Sony Corporation at FSE 2007. Combining some observations with new tricks, we can filter out the wrong keys more efficiently, and improve the impossible differential attack on 11-round CLEFIA-192/256, which also firstly works for CLEFIA-128. The complexity is about 2 encryptions and 2 chosen plaintexts. By putting more constraint conditions on plaintext pairs, we give the first attack on 12-round CLEFIA for all three key lengths with 2 encryptions and 2 chosen plaintexts. For CLEFIA-192/256, our attack is applicable to 13-round variant, of which the time complexity is about 2, and the data complexity is 2. We also extend our attack to 14-round CLEFIA-256, with about 2 encryptions and 2 chosen plaintexts. Moreover, a birthday sieve method is introduced to decrease the complexity of the core precomputation.
Improved Integral and Zero-correlation Linear Cryptanalysis of CLEFIA Block Cipher

Wentan Yi,Baofeng Wu,Shaozhen Chen,Dongdai Lin

DOI: https://doi.org/10.1007/978-3-319-54705-3_3

2017-01-01

Abstract:CLEFIA is a block cipher developed by Sony Corporation in 2007. It is a recommended cipher of CRYPTREC, and has been adopted as ISO/IEC international standard in lightweight cryptography. In this paper, some new 9-round zero-correlation linear distinguishers of CLEFIA are constructed with independent input masks and output masks, which admit multiple zero-correlation linear attacks on 14/15-round CLEAIA-192/256 about 79 times faster than results of the SAC paper with one-eighth of data. Furthermore, some new integral distinguishers over 9 rounds are derived by the relations between integral distinguishers and zero-correlation linear approximations. By using these integral distinguishers, the previous integral attacks on CLEFIA are improved with the partial sum technique. Our results have either one more rounds or lower time complexity than previous attack results with integral and zero-correlation linear cryptanalysis.
Fault Detection on the Software Implementation of CLEFIA Lightweight Cipher.

Wei Li,Dawu Gu,Xiaoling Xia,Ya Liu,Zhiqiang Liu

DOI: https://doi.org/10.4304/jnw.7.8.1288-1294

2012-01-01

Abstract:CLEFIA is an efficient lightweight cipher that delivers advanced copyright protection and authentication in computer networks. It is also applied in the secure protocol for transmission including SSL and TLS. Since it was proposed in 2007, some work about its security against differential fault analysis has been devoted to reducing the number of faults and to improving the time complexity of this attack. This attack is very efficient when a single fault is injected into the last several rounds of the CLEFIA, and it allows to recover the whole secret key. Thus, it is an open question whether detecting the faults injected into the CLEFIA with low overhead of space and time tolerance. In this paper, we present a fault detection of the CLEFIA block cipher in the single-byte fault model. Our result in this study could detect the faults with negligible cost when faults are even injected into the last four rounds.
Saturation Cryptanalysis of CLEFIA

王薇,王小云

DOI: https://doi.org/10.3321/j.issn:1000-436x.2008.10.014

2008-01-01

Abstract:The saturation attack on a novel block cipher CLEFIA,which was proposed in FSE 2007,was reevaluated.The flaws in Shirai et al’s 8 round distinguishers were pointed out and corrected.In order to reduce the number of guessed subkeys,the attack utilized the movement of the whitening key to combine it with subkey,and explored a di-vide-and-conquer strategy.The partial sum technique was adopted to reduce the time complexity.As a result,the satura-tion attack can be extended from 10 round variant without key whitenings to 11 round CLEFIA-128/192/256,and is ap-plicable to 12 round CLEFIA-192/256 and 13 round CLEFIA-256.
INLEC: An involutive and low energy lightweight block cipher for internet of things

JiaYi Feng,Lang Li,LiuYan Yan,ChuTian Deng

DOI: https://doi.org/10.1016/j.pmcj.2024.101991

IF: 3.848

2024-09-25

Pervasive and Mobile Computing

Abstract:The Internet of Things (IoT) has emerged as a pivotal force in the global technological revolution and industrial transformation.Despite its advancements, IoT devices continue to face significant security challenges, particularly during data transmission, and are often constrained by limited battery life and energy resources.To address these challenges,a low energy lightweight block cipher (INLEC) is proposed to mitigate data leakage in IoT devices. In addition, the Structure and Components INvolution (SCIN) design is introduced. It is constructed using two similar round functions to achieve front–back symmetry.This design ensures coherence throughout the INLEC encryption and decryption processes and addresses the increased resource consumption during the decryption phase in Substitution Permutation Networks (SPN).Furthermore, a low area S-box is generated through a hardware gate-level circuit search method combined with Genetic Programming (GP).This optimization leads to a 47.02% reduction in area compared to the S0 of Midori, using UMC 0.18μm technology. Moreover, a chaotic function is used to generate the optimal nibble-based involutive permutation, further enhancing its efficiency.In terms of performs, the energy consumption for both encryption and decryption with INLEC is 6.88 μ J/bit, representing 25.21% reduction compared to Midori.Finally, INLEC is implemented using STM32L475 PanDuoLa and Nexys A7 FPGA development boards, establishing an encryption platform for IoT devices. This platform provides functions for data acquisition, transmission, and encryption.

computer science, information systems,telecommunications
Impossible Differential Cryptanalysis of CLEFIA-128/192/256

王薇,王小云

DOI: https://doi.org/10.3724/SP.J.1001.2009.00576

2009-01-01

Journal of Software

Abstract:An improved impossible differential attack on the block cipher CLEFIA is presented.CLEFIA was proposed by Sony Corporation at FSE 2007.Combining some observations with new tricks,the wrong keys are filtered out more efficiently,and the original impossible differential attack on 11-round CLEFIA-192/256 published by the designers,is extended to CLEFIA-128/192/256,with about 2103.1 encryptions and 2103.1 chosen plaintexts.By putting more constraint conditions on plaintext pairs,we present an attack on 12-round CLEFIA for all three key lengths with 2119.1 encryptions and 2119.1 chosen plaintexts.Moreover,a birthday sieve method is introduced to decrease the complexity of the precomputation.And an error about the time complexity evaluation in Tsunoo et al.'s attack on 12-round CLEFIA is pointed out and corrected.
Improved Low-Entropy Masking Scheme For Led With Mitigation Against Correlation-Enhanced Collision Attacks

Fan Zhang,Liang Geng,Jizhong Shen,Shivam Bhasin,Xinjie Zhao,Shize Guo

DOI: https://doi.org/10.1109/AsianHOST.2017.8353994

2017-01-01

Abstract:Recent lightweight cryptographic algorithms are vulnerable to side channel attacks (SCA), requiring a careful design of implementations. In this paper, we carefully investigate the "Low-Entropy Masking Scheme" (LEMS) on the block cipher LED in the context of resource-constrained environments. We propose an improved LEMS called "iMLED", so as to satisfy two different yet unified design goals: to maintain the entropy of the masking at one bit, meanwhile, to enhance first-order SCA-resistance against advanced SCAs such as correlation-enhanced collision attack (CCA). The security of the implementation has been evaluated based on the SASEBO-W board, which proves that iM-LED has boosted its mitigation against SCA with limited overheads.
Improved Differential Fault Analysis on LED with Constraint Equations: Towards Reaching Its Limit

Fan Zhang,Yiran Zhang,Xinjie Zhao,Shize Guo,Ziyuan Liang,Samiya Qureshi

DOI: https://doi.org/10.1109/PADSW.2018.8645010

2018-01-01

Abstract:The block cipher LED is well suited for resource-constrained scenarios. However, it is vulnerable to the recent fault attacks and different results have been achieved even under the same fault model. In this paper, a comprehensive investigation is conducted on the fault analysis on LED. A novel differential fault analysis is proposed, which is based on the so-called constraint equations. The proposed attack can combine constraint equations at different levels, pushing the differential fault analysis on LED towards its limit in terms of the time complexity, the data complexity and the remained key search space. Under random nibble fault model, SINGLE fault injection can reduce the key search space of LED-64 to 2 7.90 within 1.89s, compared to 2 17.65 within 7 minutes in prior finest contributions. As to DFA on LED-128, TWO fault injections can reduce the key search space to 2 15.82 within 247.88s, compared to 2 21.96 within 16 minutes in previous work. To the best of our knowledge, the scheme that we proposed is the most efficient fault attack on LED cryptosystems.
Side-Channel Cube Attacks on EPCBC

ZHAO Xin-jie,GUO Shi-ze,WANG Tao,ZHANG Fan

DOI: https://doi.org/10.3969/j.issn.1671-1742.2012.06.001

2012-01-01

Abstract:The security of EPCBC,a lightweight block cipher proposed in CANS 2011,against the side-channel cube attack is evaluated by combining cube cryptanalysis with side-channel attack under the 8-bit Hamming weight leakage model.Under the black-box attack scenario,the adversary firstly generates random cube and superpoly.Then the cube is used to generate chosen plaintexts.The adversary deduces one bit of the intermediate state from the side-channel attack for each chosen plaintext and computes the high order differences of these one bit values to verify the relations between the cube and superpoly.Simulation experiments are launched on two variants of EPCBC with different block lengths.The results demonstrate that the unprotected implementation of EPCBC is vulnerable to side-channel cube attacks.If the adversary can accurately deduce the Hamming weight of the intermediate states from the side-channel leakages,many cubes and superpolys can be extracted and used for key recovery.372 chosen plaintexts can recover 48-bit of the master key for EPCBC(48,96) and reduce the key search space to 248.610 chosen plaintexts can recover full 96-bit of the master key for EPCBC(96,96) directly.The techniques of this paper can provide certain references to black-box side-channel cube attacks on other block ciphers.
Security Analysis Of Block Cipher Bear

Huafei Zhu,Haibin Qu,Lixin Ran,Yumin Wang

IF: 1.019

2000-01-01

Chinese Journal of Electronics

Abstract:Pseudo-randomness and differential aspect of the unbalanced Feistel block cipher BEAR are mainly concerned in this paper. We have shown that two facts of block cipher BEAR. The order of pseudo-randomness of BEAR is O(2(t/2) + 2(S/2)), which implies that BEAR can resist O(2(t/2)+ 2(s/2)) Order plain-text attack. And the other fact is that if hash function can resist differential attack then so does the block cipher BEAR.
A First Step to Provable Security in Block Ciphers against Side Channel Attacks

Wei Li.,Dawu Gu

DOI: https://doi.org/10.1109/CHINACOM.2007.4469414

2008-01-01

Abstract:Security notions for block ciphers have been defined in a concrete security framework. Yet, a cryptosystem against side channel attacks has no appropriate secure goals and adversary models for some reason currently. This paper presents some security notions for block ciphers against side channel attack. Based on these definitions, we establish the relationship between them by reduction on the success of adversaries as a function of their resources. It provides a general theoretical method for block ciphers against side channel attacks.
Mobile Commerce-Oriented Block Cipher Algorithm

李顺东,覃征,王向华,贾晓琳

DOI: https://doi.org/10.3321/j.issn:0253-987X.2003.08.015

2003-01-01

Abstract:A new block cipher is designed where the diffusion of matrix multiplication is combined with the confusion of specially designed matrix operation to encrypt information. The strong security to all known cryptanalysis ensures the encryption of both letter information and non-letter Chinese character information. Less code and computation needed facilitate its embedment into digital equipment to implement encryption, such as mobile phone. Thus the newly proposed cipher is of interest to mobile-commerce information security.
HDLBC: A lightweight block cipher with high diffusion

Yongchao Li,Jingya Feng,Qi Zhao,Yongzhuang Wei

DOI: https://doi.org/10.1016/j.vlsi.2023.102090

IF: 1.345

2024-01-01

Integration

Abstract:Both the diffusion property and the area consumption are two important evaluation criteria in the design and implementation of symmetric encryption algorithms. Many AND-Rotation-XOR (AND-RX) block ciphers are usually designed by reducing the diffusion property to minimize the area consumption. On the other hand, these AND-RX block ciphers use multiple round function operations to achieve the enough diffusion property, which always induce more area consumption in their hardware implementation. How to trade off the diffusion property and the area consumption appears to be an interesting task in the design of block cipher. In this paper, HDLBC as a new family of lightweight block cipher (with 64-bit plaintext and 64-bit/128-bit key) for the Internet of Things (IoT) is proposed. More specifically, the HDLBC is designed by using only two F-functions (RA 1 and RA 2 ), where the non-linear layer of the F-functions is constructed by the NAND operation that consumes the least area among the non-linear logic operations. To the best of our knowledge, HDLBC cipher requires the minimum number of F-functions to provide the diffusion property, where the F-functions require fewer implementation resources than the F-functions of existing similar encryption algorithms. It illustrates the hardware implementation of HDLBC cipher on SMIC 0 . 18 μ m requires only 1248 Gate Equivalents (GEs), its throughput rate is 256 Kbps at 100 KHz. Compared with other encryption algorithms, the implementation performance of HDLBC cipher achieves well-balanced in both the area consumption and diffusion property. Moreover, the security analysis shows that HDLBC cipher has enough security margin against various known attacks, such as differential cryptanalysis, linear cryptanalysis, impossible differential cryptanalysis, zero correlation cryptanalysis, etc.

engineering, electrical & electronic,computer science, hardware & architecture
GFRX: A New Lightweight Block Cipher for Resource-Constrained IoT Nodes

Xing Zhang,Shaoyu Tang,Tianning Li,Xiaowei Li,Changda Wang

DOI: https://doi.org/10.3390/electronics12020405

IF: 2.9

2023-01-13

Electronics

Abstract:The study of lightweight block ciphers has been a "hot topic". As one of the main structures of block ciphers, the Feistel structure has attracted much attention. However, the traditional Feistel structure cipher changes only half of the plaintext in an iterative round, resulting in slow diffusion. Therefore, more encryption rounds are required to ensure security. To address this issue, a new algorithm, GFRX, is proposed, which combines a generalized Feistel structure and ARX (Addition or AND, Rotation, XOR). The GFRX algorithm uses an ARX structure with different non-linear components to deal with all the branches of a generalized Feistel structure so that it can achieve a better diffusion effect in fewer rounds. {The results of a security analysis of the GFRX algorithm show that the effective differential attacks do not exceed 19 rounds and that the effective linear attacks do not exceed 13 rounds.} Therefore, the GFRX algorithm has an adequate security level for differential and linear analysis. Avalanche test results obtained for the GFRX algorithm show that the GFRX algorithm has strong diffusion and only takes six rounds to meet the avalanche effect. In addition, the GFRX algorithm can achieve different serialization levels depending on different hardware resource requirements and can achieve full serialization, which ensures operational flexibility in resource-constrained environments.

engineering, electrical & electronic,computer science, information systems,physics, applied
A Key Delay Design on Block Cipher Algorithm

LUO Lan,QU Ze-hui,ZHOU Shi-jie,ZHANG Feng-li,QIN Zhi-guang,WEI Zheng-yao

DOI: https://doi.org/10.3969/j.issn.1001-0548.2007.03.048

2007-01-01

Abstract:A key delay design on block cipher is proposed and is demonstrated based on provable security with information theory. Furthermore, we evaluate the result of key delay module. For the published block cipher, the key delay technology can enforce the cryptography system and decrease the information leak from key distribution through internet. Especially, this model can prevent the only cipher-text attack by middle attack.
Control Flow Integrity Based on Lightweight Encryption Architecture.

Pengfei Qiu,Yongqiang Lyu,Jiliang Zhang,Dongsheng Wang,Gang Qu

DOI: https://doi.org/10.1109/TCAD.2017.2748000

IF: 2.9

2018-01-01

IEEE Transactions on Computer-Aided Design of Integrated Circuits and Systems

Abstract:Control-flow integrity (CFI) plays a very important role in defending against code reuse attacks by protecting the control flows of programs from being hijacked. However, previous CFI methods suffer from performance overheads, cost, or security issues. In this paper, we propose a new CFI based on a lightweight encryption architecture with advanced encryption standard (LEA-AES) to address the chall...
Hardware functional obfuscation with ferroelectric active interconnects

Tongguang Yu,Yixin Xu,Shan Deng,Zijian Zhao,Nicolas Jao,You Sung Kim,Stefan Duenkel,Sven Beyer,Kai Ni,Sumitha George,Vijaykrishnan Narayanan

DOI: https://doi.org/10.1038/s41467-022-29795-3

IF: 16.6

2022-04-25

Nature Communications

Abstract:Abstract Existing circuit camouflaging techniques to prevent reverse engineering increase circuit-complexity with significant area, energy, and delay penalty. In this paper, we propose an efficient hardware encryption technique with minimal complexity and overheads based on ferroelectric field-effect transistor (FeFET) active interconnects. By utilizing the threshold voltage programmability of the FeFETs, run-time reconfigurable inverter-buffer logic, utilizing two FeFETs and an inverter, is enabled. Judicious placement of the proposed logic makes it act as a hardware encryption key and enable encoding and decoding of the functional output without affecting the critical path timing delay. Additionally, a peripheral programming scheme for reconfigurable logic by reusing the existing scan chain logic is proposed, obviating the need for specialized programming logic and circuitry for keybit distribution. Our analysis shows an average encryption probability of 97.43% with an increase of 2.24%/ 3.67% delay for the most critical path/ sum of 100 critical paths delay for ISCAS85 benchmarks.

multidisciplinary sciences
LIBC: a low-cost lightweight block cipher for IoT application

Qingwen Yan,Ying Guo,Wenfen Liu,Wen Chen,Yongcan Lu

DOI: https://doi.org/10.1088/1402-4896/ad9867

2024-11-29

Physica Scripta

Abstract:With the rapid growth of the Internet of Things (IoT), designing lightweight block ciphers has become essential for securing resource-constrained devices. This necessitates a balance among low-cost implementation, diffusion, and security. To address this challenge, we propose a novel lightweight block cipher named LIBC, which has a 64-bit block size supporting 128-bit keys. In the nonlinear layer, we develop a four-round structure to design optimal 4-bit S-boxes, generating 8,832 S-boxes that provide excellent security and compact hardware overhead. To balance diffusion with resource efficiency, we use a 4×4 almost MDS matrix and introduce a type of optimal involutive nibble-based permutations based on SAT. This ensures that LIBC achieves full diffusion within the minimal rounds while providing the required security. Combining the above design, LIBC's encryption and decryption circuits become nearly identical, requiring only 24 additional XOR gates for decryption. Experimental results show that LIBC exhibits strong diffusion and avalanche characteristics, providing sufficient security against various known attacks. Regarding hardware performance, the single-round iteration of the internal state in LIBC occupies only 10.05 GE per bit, which is superior compared to the round-based implementations of Midori, PRESENT, RECTANGLE, etc.

physics, multidisciplinary

The provable constructive effect of diffusion switching mechanism in CLEFIA-type block ciphers

Differential power analysis attack on CLEFIA block cipher

A Reconfigurable and Compact Hardware Architecture of CLEFIA Block Cipher with Multi-Configuration.

Improved Impossible Differential Cryptanalysis of CLEFIA.

Improved Integral and Zero-correlation Linear Cryptanalysis of CLEFIA Block Cipher

Fault Detection on the Software Implementation of CLEFIA Lightweight Cipher.

Saturation Cryptanalysis of CLEFIA

INLEC: An involutive and low energy lightweight block cipher for internet of things

Impossible Differential Cryptanalysis of CLEFIA-128/192/256

Improved Low-Entropy Masking Scheme For Led With Mitigation Against Correlation-Enhanced Collision Attacks

Improved Differential Fault Analysis on LED with Constraint Equations: Towards Reaching Its Limit

Side-Channel Cube Attacks on EPCBC

Security Analysis Of Block Cipher Bear

A First Step to Provable Security in Block Ciphers against Side Channel Attacks

Mobile Commerce-Oriented Block Cipher Algorithm

HDLBC: A lightweight block cipher with high diffusion

GFRX: A New Lightweight Block Cipher for Resource-Constrained IoT Nodes

A Key Delay Design on Block Cipher Algorithm

Control Flow Integrity Based on Lightweight Encryption Architecture.

Hardware functional obfuscation with ferroelectric active interconnects

LIBC: a low-cost lightweight block cipher for IoT application