<p>In recent years, the Substitution-Permutation Network has emerged as a crucial structure for constructing symmetric key ciphers. Composed primarily of linear layers (mainly consisting of matrices and permutations) and nonlinear S-boxes, it offers a robust foundation for cryptographic security. Among the various metrics used to assess the cryptographic properties of linear matrices, the branch number stands out as a particularly important index. Matrices with an optimal branch number are referred to as MDS matrices and are highly prized in the field of cryptography. In this paper we delve into the construction of lightweight MDS matrices. We commence implementation trees of MDS matrices, which is a vital tool for understanding and manipulating their implementations, and then present an algorithm that efficiently enumerates all the lightest MDS matrices based on the word representation. As results, we obtain a series of ultra-lightweight <InlineEquation ID="IEq1"> <EquationSource Format="TEX">\(\varvec{4\times 4}\)</EquationSource> </InlineEquation> MDS matrices, remarkably, 4-bit input MDS matrices with 35 XOR operations and 8-bit input ones with 67 XOR operations. These matrices represent the most comprehensive lightweight MDS matrices available to date. Furthermore, we craft some involution <InlineEquation ID="IEq2"> <EquationSource Format="TEX">\(\varvec{4\times 4}\)</EquationSource> </InlineEquation> MDS matrices with a mere 68 XOR gates. To our best knowledge, they are the best up to date. In the realm of higher-order MDS matrices, we have successfully constructed <InlineEquation ID="IEq3"> <EquationSource Format="TEX">\(\varvec{5\times 5}\)</EquationSource> </InlineEquation>, <InlineEquation ID="IEq4"> <EquationSource Format="TEX">\(\varvec{6\times 6}\)</EquationSource> </InlineEquation> and <InlineEquation ID="IEq5"> <EquationSource Format="TEX">\(\varvec{7\times 7}\)</EquationSource> </InlineEquation> matrices with 114, 148 and 218 XOR gates respectively. These findings outperform the current state-of-the-art.</p>

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

On the construction of ultra-light MDS matrices

  • Yu Tian,
  • Xiutao Feng,
  • Guangrong Li

摘要

In recent years, the Substitution-Permutation Network has emerged as a crucial structure for constructing symmetric key ciphers. Composed primarily of linear layers (mainly consisting of matrices and permutations) and nonlinear S-boxes, it offers a robust foundation for cryptographic security. Among the various metrics used to assess the cryptographic properties of linear matrices, the branch number stands out as a particularly important index. Matrices with an optimal branch number are referred to as MDS matrices and are highly prized in the field of cryptography. In this paper we delve into the construction of lightweight MDS matrices. We commence implementation trees of MDS matrices, which is a vital tool for understanding and manipulating their implementations, and then present an algorithm that efficiently enumerates all the lightest MDS matrices based on the word representation. As results, we obtain a series of ultra-lightweight \(\varvec{4\times 4}\) MDS matrices, remarkably, 4-bit input MDS matrices with 35 XOR operations and 8-bit input ones with 67 XOR operations. These matrices represent the most comprehensive lightweight MDS matrices available to date. Furthermore, we craft some involution \(\varvec{4\times 4}\) MDS matrices with a mere 68 XOR gates. To our best knowledge, they are the best up to date. In the realm of higher-order MDS matrices, we have successfully constructed \(\varvec{5\times 5}\) , \(\varvec{6\times 6}\) and \(\varvec{7\times 7}\) matrices with 114, 148 and 218 XOR gates respectively. These findings outperform the current state-of-the-art.