International Association for Cryptologic Research

International Association
for Cryptologic Research


Paper: Lightweight Authenticated Encryption Mode of Operation for Tweakable Block Ciphers

Yusuke Naito , Mitsubishi Electric Corporation, Kamakura, Kaganawa
Takeshi Sugawara , The University of Electro-Communications, Chofu, Tokyo
DOI: 10.13154/tches.v2020.i1.66-94
Search ePrint
Search Google
Presentation: Slides
Abstract: The use of a small block length is a common strategy when designing lightweight (tweakable) block ciphers (TBCs), and several 64-bit primitives have been proposed. However, when such a 64-bit primitive is used for an authenticated encryption with birthday-bound security, it has only 32-bit data complexity, which is subject to practical attacks. To employ a short block length without compromising security, we propose PFB, a lightweight TBC-based authenticated encryption with associated data mode, which achieves beyond-birthday-bound security. For this purpose, we extend iCOFB, which is originally defined with a tweakable random function. Unlike iCOFB, the proposed method can be instantiated with a TBC using a fixed tweak length and can handle variable-length data. Moreover, its security bound is improved and independent of the data length; this improves the key lifetime, particularly in lightweight blocks with a small size. The proposed method also covers a broader class of feedback functions because of the generalization presented in our proof. We evaluate the concrete hardware performances of PFB, which benefits from the small block length and shows particularly good performances in threshold implementation.
Video from TCHES 2019
  title={Lightweight Authenticated Encryption Mode of Operation for Tweakable Block Ciphers},
  journal={IACR Transactions on Cryptographic Hardware and Embedded Systems},
  publisher={Ruhr-Universit├Ąt Bochum},
  volume={2020, Issue 1},
  author={Yusuke Naito and Takeshi Sugawara},