Hardware Performance of ELmD and ELmD(6,6)

Lilian Bossuet (1) , Nilanjan Datta (2) , Cuauhtemoc Mancillas-López (1) , Mridul Nandi (2)

1 LHC - Laboratoire Hubert Curien
2 Indian Statistical Institute [Kolkata]

—ELmD (Encrypt-Linear mix-Decrypt) is a block-cipher based efficient authenticated encryption scheme, which is nonce misuse resistant, fully pipeline implementable. ELmD is a candidate for CAESAR competition and it has been selected for the second round. In this document, we first consider two versions of ELmDv2.0-(i) ELmD: full 10-round AES encryption-decryption, no intermediate tag, fixed tag size and (ii) ELmD(6,6): 6-round AES encryption-decryption, no intermediate tag, fixed tag size. We provide the full specification for both the version and present hardware implementation of the combined encryption-decryption for both these versions. We discuss and compare the hardware performance of these versions with other popular AE schemes like COPA and OCB.

Mots clés: Authenticated Encryption; Pipelining; Hardware Per- formance

Domaines: Cryptographie et sécurité [cs.CR]; Architectures Matérielles [cs.AR]

Lilian Bossuet, Nilanjan Datta, Cuauhtemoc Mancillas-López, Mridul Nandi. Hardware Performance of ELmD and ELmD(6,6). Directions in Authenticated Ciphers - DIAC 2015, Sep 2015, Singapore, Singapore. ⟨hal-01382944⟩