International Association for Cryptologic Research

International Association
for Cryptologic Research

CryptoDB

Fixslicing: A New GIFT Representation: Fast Constant-Time Implementations of GIFT and GIFT-COFB on ARM Cortex-M

Authors:
Alexandre Adomnicai , Nanyang Technological University, Singapore; Temasek Laboratories, Singapore
Zakaria Najm , Nanyang Technological University, Singapore; Temasek Laboratories, Singapore; TU Delft, Netherlands
Thomas Peyrin , Nanyang Technological University, Singapore; Temasek Laboratories, Singapore
Download:
DOI: 10.13154/tches.v2020.i3.402-427
URL: https://tches.iacr.org/index.php/TCHES/article/view/8595
Search ePrint
Search Google
Presentation: Slides
Abstract: The GIFT family of lightweight block ciphers, published at CHES 2017, offers excellent hardware performance figures and has been used, in full or in part, in several candidates of the ongoing NIST lightweight cryptography competition. However, implementation of GIFT in software seems complex and not efficient due to the bit permutation composing its linear layer (a feature shared with PRESENT cipher). In this article, we exhibit a new non-trivial representation of the GIFT family of block ciphers over several rounds. This new representation, that we call fixslicing, allows extremely efficient software bitsliced implementations of GIFT, using only a few rotations, surprisingly placing GIFT as a very efficient candidate on micro-controllers. Our constant time implementations show that, on ARM Cortex-M3, 128-bit data can be ciphered with only about 800 cycles for GIFT-64 and about 1300 cycles for GIFT-128 (assuming pre-computed round keys). In particular, this is much faster than the impressive PRESENT implementation published at CHES 2017 that requires 2116 cycles in the same setting, or the current best AES constant time implementation reported that requires 1617 cycles. This work impacts GIFT, but also improves software implementations of all other cryptographic primitives directly based on it or strongly related to it.
Video from TCHES 2020
BibTeX
@article{tches-2020-30396,
  title={Fixslicing: A New GIFT Representation: Fast Constant-Time Implementations of GIFT and GIFT-COFB on ARM Cortex-M},
  journal={IACR Transactions on Cryptographic Hardware and Embedded Systems},
  publisher={Ruhr-Universität Bochum},
  volume={2020, Issue 3},
  pages={402-427},
  url={https://tches.iacr.org/index.php/TCHES/article/view/8595},
  doi={10.13154/tches.v2020.i3.402-427},
  author={Alexandre Adomnicai and Zakaria Najm and Thomas Peyrin},
  year=2020
}