Using Normal Bases for Compact Hardware Implementations of the AES S-Box

  • Authors:
  • Svetla Nikova;Vincent Rijmen;Martin Schläffer

  • Affiliations:
  • Dept. ESAT/SCD-COSIC, Katholieke Universiteit Leuven, Heverlee, Belgium B-3001;Dept. ESAT/SCD-COSIC, Katholieke Universiteit Leuven, Heverlee, Belgium B-3001 and Institute for Applied Information Processing and Communications (IAIK), Graz University of Technology, Graz, Aust ...;Institute for Applied Information Processing and Communications (IAIK), Graz University of Technology, Graz, Austria A-8010

  • Venue:
  • SCN '08 Proceedings of the 6th international conference on Security and Cryptography for Networks
  • Year:
  • 2008

Quantified Score

Hi-index 0.00

Visualization

Abstract

The substitution box (S-box) of the Advanced Encryption Standard (AES) is based on the multiplicative inversion s(x) = xï戮驴 1in GF(256) and followed by an affine transformation in GF(2). The S-box is the most expansive building block of any hardware implementation of the AES, and the multiplicative inversion is the most costly step of the S-box transformation. There exist many publications about hardware implementations of the S-box and the smallest known implementations are based on normal bases. In this paper, we introduce a new method to implement the multiplicative inversion over GF(256) based on normal bases that have not been considered before in the context of AES implementations.