Piccolo: an ultra-lightweight blockcipher

Authors:
Kyoji Shibutani;Takanori Isobe;Harunaga Hiwatari;Atsushi Mitsuda;Toru Akishita;Taizo Shirai
Affiliations:
Sony Corporation, Konan, Minato-ku, Tokyo, Japan;Sony Corporation, Konan, Minato-ku, Tokyo, Japan;Sony Corporation, Konan, Minato-ku, Tokyo, Japan;Sony Corporation, Konan, Minato-ku, Tokyo, Japan;Sony Corporation, Konan, Minato-ku, Tokyo, Japan;Sony Corporation, Konan, Minato-ku, Tokyo, Japan
Venue:
CHES'11 Proceedings of the 13th international conference on Cryptographic hardware and embedded systems
Year:
2011

Citing 34
Cited 19

Differential cryptanalysis of the data encryption standard

Differential cryptanalysis of the data encryption standard
Linear cryptanalysis method for DES cipher

EUROCRYPT '93 Workshop on the theory and application of cryptographic techniques on Advances in cryptology
The Rectangle Attack - Rectangling the Serpent

EUROCRYPT '01 Proceedings of the International Conference on the Theory and Application of Cryptographic Techniques: Advances in Cryptology
The Boomerang Attack

FSE '99 Proceedings of the 6th International Workshop on Fast Software Encryption
A Revised Version of Crypton - Crypton V1.0

FSE '99 Proceedings of the 6th International Workshop on Fast Software Encryption
Amplified Boomerang Attacks Against Reduced-Round MARS and Serpent

FSE '00 Proceedings of the 7th International Workshop on Fast Software Encryption
Design and Implementation of Low-Area and Low-Power AES Encryption Hardware Core

DSD '06 Proceedings of the 9th EUROMICRO Conference on Digital System Design
PRESENT: An Ultra-Lightweight Block Cipher

CHES '07 Proceedings of the 9th international workshop on Cryptographic Hardware and Embedded Systems
The Grain Family of Stream Ciphers

New Stream Cipher Designs
Trivium

New Stream Cipher Designs
A Unified Approach to Related-Key Attacks

Fast Software Encryption
Ultra-Lightweight Implementations for Smart Devices --- Security for 1000 Gate Equivalents

CARDIS '08 Proceedings of the 8th IFIP WG 8.8/11.2 international conference on Smart Card Research and Advanced Applications
On Generalized Feistel Structures Using the Diffusion Switching Mechanism

IEICE Transactions on Fundamentals of Electronics, Communications and Computer Sciences
Secure Hardware Implementation of Non-linear Functions in the Presence of Glitches

Information Security and Cryptology --- ICISC 2008
Finding Preimages in Full MD5 Faster Than Exhaustive Search

EUROCRYPT '09 Proceedings of the 28th Annual International Conference on Advances in Cryptology: the Theory and Applications of Cryptographic Techniques
Meet-in-the-Middle Preimage Attacks Against Reduced SHA-0 and SHA-1

CRYPTO '09 Proceedings of the 29th Annual International Cryptology Conference on Advances in Cryptology
Preimage Attacks on One-Block MD4, 63-Step MD5 and More

Selected Areas in Cryptography
KATAN and KTANTAN -- A Family of Small and Efficient Hardware-Oriented Block Ciphers

CHES '09 Proceedings of the 11th International Workshop on Cryptographic Hardware and Embedded Systems
Cryptanalysis of Skipjack reduced to 31 rounds using impossible differentials

EUROCRYPT'99 Proceedings of the 17th international conference on Theory and application of cryptographic techniques
Improving the generalized Feistel

FSE'10 Proceedings of the 17th international conference on Fast software encryption
PRINTcipher: a block cipher for IC-printing

CHES'10 Proceedings of the 12th international conference on Cryptographic hardware and embedded systems
256 bit standardized crypto for 650 GE: GOST revisited

CHES'10 Proceedings of the 12th international conference on Cryptographic hardware and embedded systems
ARMADILLO: a multi-purpose cryptographic primitive dedicated to hardware

CHES'10 Proceedings of the 12th international conference on Cryptographic hardware and embedded systems
A 3-subset meet-in-the-middle attack: cryptanalysis of the lightweight block cipher KTANTAN

SAC'10 Proceedings of the 17th international conference on Selected areas in cryptography
Pushing the limits: a very compact and a threshold implementation of AES

EUROCRYPT'11 Proceedings of the 30th Annual international conference on Theory and applications of cryptographic techniques: advances in cryptology
A single-key attack on the full GOST block cipher

FSE'11 Proceedings of the 18th international conference on Fast software encryption
Related-key attack on the full HIGHT

ICISC'10 Proceedings of the 13th international conference on Information security and cryptology
Threshold implementations against side-channel attacks and glitches

ICICS'06 Proceedings of the 8th international conference on Information and Communications Security
HIGHT: a new block cipher suitable for low-resource device

CHES'06 Proceedings of the 8th international conference on Cryptographic Hardware and Embedded Systems
Related-Key boomerang and rectangle attacks

EUROCRYPT'05 Proceedings of the 24th annual international conference on Theory and Applications of Cryptographic Techniques
Automatic search for related-key differential characteristics in byte-oriented block ciphers: application to AES, Camellia, Khazad and others

EUROCRYPT'10 Proceedings of the 29th Annual international conference on Theory and Applications of Cryptographic Techniques
mCrypton – a lightweight block cipher for security of low-cost RFID tags and sensors

WISA'05 Proceedings of the 6th international conference on Information Security Applications
The 128-bit blockcipher CLEFIA

FSE'07 Proceedings of the 14th international conference on Fast Software Encryption
New lightweight DES variants

FSE'07 Proceedings of the 14th international conference on Fast Software Encryption

The provable constructive effect of diffusion switching mechanism in CLEFIA-type block ciphers

Information Processing Letters
Practical attack on 8 rounds of the lightweight block cipher KLEIN

INDOCRYPT'11 Proceedings of the 12th international conference on Cryptology in India
Biclique cryptanalysis of reduced-round piccolo block cipher

ISPEC'12 Proceedings of the 8th international conference on Information Security Practice and Experience
Security analysis of the lightweight block ciphers XTEA, LED and piccolo

ACISP'12 Proceedings of the 17th Australasian conference on Information Security and Privacy
Randomness analysis on LED block ciphers

Proceedings of the Fifth International Conference on Security of Information and Networks
ElimLin algorithm revisited

FSE'12 Proceedings of the 19th international conference on Fast Software Encryption
How far should theory be from practice?: evaluation of a countermeasure

CHES'12 Proceedings of the 14th international conference on Cryptographic Hardware and Embedded Systems
Towards green cryptography: a comparison of lightweight ciphers from the energy viewpoint

CHES'12 Proceedings of the 14th international conference on Cryptographic Hardware and Embedded Systems
Lightweight cryptography for the cloud: exploit the power of bitslice implementation

CHES'12 Proceedings of the 14th international conference on Cryptographic Hardware and Embedded Systems
Low-latency encryption: is "Lightweight = light + wait"?

CHES'12 Proceedings of the 14th international conference on Cryptographic Hardware and Embedded Systems
Improved related-key differential attacks on reduced-round LBlock

ICICS'12 Proceedings of the 14th international conference on Information and Communications Security
Controversy Corner: Efficient Hamming weight-based side-channel cube attacks on PRESENT

Journal of Systems and Software
Differential analysis of the LED block cipher

ASIACRYPT'12 Proceedings of the 18th international conference on The Theory and Application of Cryptology and Information Security
PRINCE: a low-latency block cipher for pervasive computing applications

ASIACRYPT'12 Proceedings of the 18th international conference on The Theory and Application of Cryptology and Information Security
Cube cryptanalysis of LBlock with noisy leakage

ICISC'12 Proceedings of the 15th international conference on Information Security and Cryptology
Comprehensive study of integral analysis on 22-round LBlock

ICISC'12 Proceedings of the 15th international conference on Information Security and Cryptology
Improved algebraic fault analysis: a case study on piccolo and applications to other lightweight block ciphers

COSADE'13 Proceedings of the 4th international conference on Constructive Side-Channel Analysis and Secure Design
FIDES: lightweight authenticated cipher with side-channel resistance for constrained hardware

CHES'13 Proceedings of the 15th international conference on Cryptographic Hardware and Embedded Systems
Cryptanalysis of block cipher Piccolo suitable for cloud computing

The Journal of Supercomputing

Quantified Score

Hi-index	0.01

Visualization

Abstract

We propose a new 64-bit blockcipher Piccolo supporting 80 and 128-bit keys. Adopting several novel design and implementation techniques, Piccolo achieves both high security and notably compact implementation in hardware. We show that Piccolo offers a sufficient security level against known analyses including recent related-key differential attacks and meet-in-the-middle attacks. In our smallest implementation, the hardware requirements for the 80 and the 128-bit key mode are only 683 and 758 gate equivalents, respectively. Moreover, Piccolo requires only 60 additional gate equivalents to support the decryption function due to its involution structure. Furthermore, its efficiency on the energy consumption which is evaluated by energy per bit is also remarkable. Thus, Piccolo is one of the competitive ultra-lightweight blockciphers which are suitable for extremely constrained environments such as RFID tags and sensor nodes.