Searching the space of tower field implementations of the 𝔽28 inverter - with applications to AES, Camellia and SM4. (21st December 2022)

• Record Type: Journal Article
• Authors: Wei, Zihao; Sun, Siwei; Hu, Lei; Wei, Man; Peralta, René
• Is Part Of: International journal of information and computer security. Volume 20:Number 1/2(2023)
• Page Start: 1
• Page End: 26
• Publication Date: 2022-12-21
• Subjects: tower field -- inverter -- S-box -- AES -- Camellia -- SM4; Computer security -- Periodicals; Information systems management -- Security measures -- Periodicals; Computer networks -- Security measures -- Periodicals; Information technology -- Security measures -- Periodicals; 005.805
• Languages: English
• ISSNs: 1744-1765

Abstract

The tower field implementation of the 𝔽2 8 inverter is not only the key technique for compact implementations of the S-boxes of several internationally standardised block ciphers such as AES, Camellia, and SM4, but also the underlying structure many side-channel attack resistant AES implementations rely on. In this work, we conduct an exhaustive study of the tower field representations of the 𝔽2 8 inverter with normal bases by applying several state-of-the-art combinatorial logic minimisation techniques. As a result, we achieve improved implementations of the AES, Camellia and SM4 S-boxes in terms of area footprint. Surprisingly, we are still able to improve the currently known most compact implementation of the AES S-box from CHES 2018 by 5.5 GE, beating the record again. For Camellia and SM4, the improvements are even more significant. The Verilog codes of our implementations of the AES, Camellia and SM4 S-boxes are openly available.