Abstract:The secure computation of symmetric encryption schemes using Yao's garbled circuits, such as AES, allows two parties, where one holds a plaintext block m and the other holds a key k, to compute Enc(k,m) without leaking m and k to one another. Due to its wide application prospects, secure AES computation has received much attention. However, the evaluation of AES circuits using Yao's garbled circuits incurs substantial communication overhead. To further improve its efficiency, this paper, upon observing the special structures of AES circuits and the symmetries of an S-box, proposes a novel ciphertext reduction scheme for garbling an S-box in the last SubBytes step. Unlike the idea of traditional Yao's garbled circuits, where the circuit generator uses the input wire labels to encrypt the corresponding output wire labels, our garbling scheme uses the input wire labels of an S-box to encrypt the corresponding "flip bit strings". This approach leads to a significant performance improvement in our garbling scheme, which necessitates only 28 ciphertexts to garble an S-box and a single invocation of a cryptographic primitive for decryption compared to the best result in previous work that requires 8×28 ciphertexts to garble an S-box and multiple invocations of a cryptographic primitive for decryption. Crucially, the proposed scheme provides a new idea to improve the performance of Yao's garbled circuits. We analyze the security of the proposed scheme in the semi-honest model and experimentally verify its efficiency.

Low Delay AES S-Box Designs Based on Matrix Merging Method

A Low Critical Path Delay Structure For Composite Field Aes S-Box Based On Constant Matrices Multiplication Merging

Design and Implementation of Generic Low-entropy High-order Composite Field Based Masking Scheme

Application of the Composite Field in the Design of an Improved AES S-box Based on Inversion

Low-cost hardware implementation of SM4 based on composite field

A Compact Implementation of Masked AES S-Box

Design of a Masked S-Box for SM4 Based on Composite Field.

A Very Compact Masked S-Box for High-Performance Implementation of SM4 Based on Composite Field.

An Expression Method to Implement S-Box and Inverse S-Box Substitution for AES Algorithm

Side-channel Attack-Resistant AES S-box with Hidden Subfield Inversion and Glitch-Free Masking

An improved s-box of lightweight block cipher roadrunner for hardware optimization

A new algorithm of S-box for hardware implementation of SMS4

A Ciphertext Reduction Scheme for Garbling an S-Box in an AES Circuit with Minimal Online Time

8×8 S-boxes over Klein four-group and Galois field $ {GF}\left({2}^{4}\right) $: AES redesign

Area-efficient Polynomial Modular Multiplication over GF(2∧n) and Application to AES

Low-Cost Energy-Efficient Side-Channel Attacks Resistant AES S-Box with Power-Aware Hiding Inverter in GF(2^4).

A Full Matrix Joint Optimization Method for Hardware Implementation of AES MixColumns/InvMixColumns.

Design of low-power and high-speed multiplier

90 nm CMOS Implementation of Multiplicative Inverse of the S-Box for AES Algorithm using Six Transistor XOR Gate

Power-aware Hiding Method for S-box Protection

High Throughput Aes Encryption/Decryption With Efficient Reordering And Merging Techniques