An AES Based 256-bit Hash Function for Lightweight Applications: Lesamnta-LW

Hirose, Shouichi; Ideguchi, Kota; Kuwakado, Hidenori; Owada, Toru; Preneel, Bart; Yoshida, Hirotaka

doi:10.1587/transfun.e95.a.89

Cited by 19 publications

(13 citation statements)

References 33 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…In [19], the authors presented two PRF modes based on Lesamnta-LW, which are called a keyed-via-IV (KIV) mode and a key-prefix (KP) mode.…”

Section: Discussionmentioning

confidence: 99%

“…Then, the proposed scheme is compared with two PRF modes based on Lesamnta-LW in [19] in terms of efficiency.…”

Section: Prf With Minimum Paddingmentioning

confidence: 99%

“…To answer to such demand, for cryptographic hash functions, the international standard ISO/IEC 29192-5 [22] has been published, which includes three lightweight hash functions: PHOTON [18], SPON-GENT [15] and Lesamnta-LW [19].…”

Section: Introductionmentioning

confidence: 99%

See 2 more Smart Citations

A Pseudorandom-Function Mode Based on Lesamnta-LW and the MDP Domain Extension and Its Applications

Hirose

Kuwakado

Yoshida

2018

IEICE Trans. Fundamentals

Self Cite

View full text Add to dashboard Cite

SUMMARY This paper discusses a mode for pseudorandom functions (PRFs) based on the hashing mode of Lesamnta-LW and the domain extension called Merkle-Damgård with permutation (MDP). The hashing mode of Lesamnta-LW is a plain Merkle-Damgård iteration of a block cipher with its key size half of its block size. First, a PRF mode is presented which produces multiple independent PRFs with multiple permutations and initialization vectors if the underlying block cipher is a PRP. Then, two applications of the PRF mode are presented. One is a PRF with minimum padding. Here, padding is said to be minimum if the produced message blocks do not include message blocks only with the padded sequence for any non-empty input message. The other is a vector-input PRF using the PRFs with minimum padding.

show abstract

“…In [19], the authors presented two PRF modes based on Lesamnta-LW, which are called a keyed-via-IV (KIV) mode and a key-prefix (KP) mode.…”

Section: Discussionmentioning

confidence: 99%

“…Then, the proposed scheme is compared with two PRF modes based on Lesamnta-LW in [19] in terms of efficiency.…”

Section: Prf With Minimum Paddingmentioning

confidence: 99%

See 1 more Smart Citation

A Pseudorandom-Function Mode Based on Lesamnta-LW and the MDP Domain Extension and Its Applications

Hirose

Kuwakado

Yoshida

2018

IEICE Trans. Fundamentals

Self Cite

View full text Add to dashboard Cite

show abstract

“…For instance, there have been a number of studies that have realized multiple symmetric key ciphers such as the block cipher, stream cipher, MAC, and hash function from single cryptographic primitive [22][23][24][25][26]. e lightweight hash function Lesamnta-LW [27] specified in ISO/IEC 29192-5 is one of the primitives which has the above mentioned characteristic. It employs the internal AES-based block cipher.…”

Section: Perspectives From Lightweight Crypto Stackmentioning

confidence: 99%

Lightweight Crypto Stack for TPMS Using Lesamnta-LW

Watanabe

Yamamoto

Yoshida

2020

Security and Communication Networks

Self Cite

View full text Add to dashboard Cite

Modern vehicles which have internal sensor networks are one of the examples of a cyberphysical system (CPS). The tire pressure monitoring system (TPMS) is used to monitor the pressure of the tires and to inform the driver of them. This system is mandatory for vehicles in the US and EU. To ensure the security of TPMS, it is important to reduce the cost of the cryptographic mechanisms implemented in resource-constrained devices. To address this problem, previous works have proposed countermeasures employing lightweight block ciphers such as PRESENT, SPECK, or KATAN. However, it is not clear to us that any of these works have addressed the issues of software optimization that considers TPMS packet protection as well as session key updates for architectures consisting of the vehicle TPMS ECU and four low-cost TPMS sensors equipped with the tires. In this paper, we propose the application of ISO/IEC 29192-5 lightweight hash function Lesamnta-LW to address these issues. When we apply cryptographic mechanisms to a practical system, we consider the lightweight crypto stack which contains cryptographic mechanisms, specifications for the implementation, and performance evaluation. Our approach is to apply the known method of converting Lesamnta-LW to multiple independent pseudorandom functions (PRFs) in TPMS. In our case, we generate five PRFs this way and then use one PRF for MAC generation and four for key derivation. We use the internal AES-based block cipher of Lesamnta-LW for encryption. Although we follow the NIST SP 800-108 framework of converting PRFs to key derivation functions, we confirm the significant advantage of Lesamnta-LW-based PRFs over HMAC-SHA-256 by evaluating the performance on AVR 8-bit microcontrollers, on which we consider simulating TPMS sensors. We expect that our method to achieve multiple purposes with a single cryptographic primitive will help us to reduce the total implementation cost required for TPMS security.

show abstract

“…It is a fast lightweight hash function supporting 256-bit hash size and is suitable for devices running on 8-bit microcontroller [68]. Lesamnta-LW is a compact design but there exists a known-key distinguisher attack [69].…”

Section: Lesamnta-lwmentioning

confidence: 99%

A Review on Performance Evaluation Criteria and Tools for Lightweight Block Ciphers

Sehrawat¹

2019

IJATCSE

View full text Add to dashboard Cite

Internet of Things (IoT) has become a powerful paradigm that has made significant progress in almost all areas. It has attracted worldwide attention in the smart computing environment. Security is considered as one of the most important concerns of constraint end nodes. Providing solutions to these resource constraint devices through ordinary cryptographic solutions is not sufficient. To fulfill this gap, a relatively new field of cryptography called lightweight cryptography came into existence. Besides, ISO/IEC provides various standards related to ICT. There are several parameters for both hardware and software implementations that are set to assess the ciphers. This paper presents criteria posed by these standards that can be considered by a cipher designer so as to include cipher in this standard. A software implementation of security algorithms consider some evaluation parameters. Such performance evaluation criteria, some metrics and performance evaluation tools relevant in this context are also presented in this paper.

show abstract

An AES Based 256-bit Hash Function for Lightweight Applications: Lesamnta-LW

Cited by 19 publications

References 33 publications

A Pseudorandom-Function Mode Based on Lesamnta-LW and the MDP Domain Extension and Its Applications

A Pseudorandom-Function Mode Based on Lesamnta-LW and the MDP Domain Extension and Its Applications

Lightweight Crypto Stack for TPMS Using Lesamnta-LW

A Review on Performance Evaluation Criteria and Tools for Lightweight Block Ciphers

Contact Info

Product

Resources

About