{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,13]],"date-time":"2026-07-13T19:06:37Z","timestamp":1783969597635,"version":"3.55.0"},"publisher-location":"Berlin, Heidelberg","reference-count":38,"publisher":"Springer Berlin Heidelberg","isbn-type":[{"value":"9783662483237","type":"print"},{"value":"9783662483244","type":"electronic"}],"license":[{"start":{"date-parts":[[2015,1,1]],"date-time":"2015-01-01T00:00:00Z","timestamp":1420070400000},"content-version":"tdm","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2015]]},"DOI":"10.1007\/978-3-662-48324-4_5","type":"book-chapter","created":{"date-parts":[[2015,8,31]],"date-time":"2015-08-31T06:27:48Z","timestamp":1441002468000},"page":"81-101","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":12,"title":["NaCl\u2019s Crypto_box in Hardware"],"prefix":"10.1007","author":[{"given":"Michael","family":"Hutter","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"J\u00fcrgen","family":"Schilling","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Peter","family":"Schwabe","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Wolfgang","family":"Wieser","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2015,9,1]]},"reference":[{"issue":"8","key":"5_CR1","doi-asserted-by":"publisher","first-page":"1099","DOI":"10.1109\/TVLSI.2009.2019415","volume":"17","author":"K Ananyi","year":"2009","unstructured":"Ananyi, K., Alrimeih, H., Rakhmatov, D.: Flexible hardware processor for elliptic curve cryptography over NIST prime fields. IEEE Trans. Very Large Scale Integr. (VLSI) 17(8), 1099\u20131112 (2009). 4","journal-title":"IEEE Trans. Very Large Scale Integr. (VLSI)"},{"key":"5_CR2","first-page":"97","volume":"22","author":"K Ashton","year":"2009","unstructured":"Ashton, K.: That \u2019internet of things\u2019 thing. RFID J. 22, 97\u2013114 (2009). \n                      http:\/\/www.rfidjournal.com\/articles\/view?4986\n                      \n                    . 1","journal-title":"RFID J."},{"key":"5_CR3","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"32","DOI":"10.1007\/11502760_3","volume-title":"Fast Software Encryption","author":"DJ Bernstein","year":"2005","unstructured":"Bernstein, D.J.: The Poly1305-AES message-authentication code. In: Gilbert, H., Handschuh, H. (eds.) FSE 2005. LNCS, vol. 3557, pp. 32\u201349. Springer, Heidelberg (2005). \n                      http:\/\/cr.yp.to\/papers.html#poly1305\n                      \n                    . 2, 6, 7"},{"key":"5_CR4","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"207","DOI":"10.1007\/11745853_14","volume-title":"Public Key Cryptography - PKC 2006","author":"DJ Bernstein","year":"2006","unstructured":"Bernstein, D.J.: Curve25519: new Diffie-Hellman speed records. In: Yung, M., Dodis, Y., Kiayias, A., Malkin, T. (eds.) PKC 2006. LNCS, vol. 3958, pp. 207\u2013228. Springer, Heidelberg (2006). \n                      http:\/\/cr.yp.to\/papers.html#curve25519\n                      \n                    . 2, 4, 5, 7"},{"key":"5_CR5","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"84","DOI":"10.1007\/978-3-540-68351-3_8","volume-title":"New Stream Cipher Designs","author":"DJ Bernstein","year":"2008","unstructured":"Bernstein, D.J.: The Salsa20 family of stream ciphers. In: Robshaw, M., Billet, O. (eds.) New Stream Cipher Designs. LNCS, vol. 4986, pp. 84\u201397. Springer, Heidelberg (2008). \n                      http:\/\/cr.yp.to\/papers.html#salsafamily\n                      \n                    . 2, 5, 7"},{"key":"5_CR6","unstructured":"Bernstein, D.J.: Extending the Salsa20 nonce. In Workshop record of Symmetric Key Encryption Workshop 2011 (2011). \n                      http:\/\/cr.yp.to\/papers.html#xsalsa\n                      \n                    . 5, 7"},{"key":"5_CR7","unstructured":"Bernstein, D.J., Lange, T.: eBACS: ECRYPT benchmarking of cryptographic systems. \n                      http:\/\/bench.cr.yp.to\n                      \n                    . Accessed 28 Sep 2014. 4"},{"key":"5_CR8","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"159","DOI":"10.1007\/978-3-642-33481-8_9","volume-title":"Progress in Cryptology \u2013 LATINCRYPT 2012","author":"DJ Bernstein","year":"2012","unstructured":"Bernstein, D.J., Lange, T., Schwabe, P.: The security impact of a new cryptographic library. In: Hevia, A., Neven, G. (eds.) LatinCrypt 2012. LNCS, vol. 7533, pp. 159\u2013176. Springer, Heidelberg (2012). \n                      http:\/\/cryptojedi.org\/papers\/#coolnacl\n                      \n                    . 2, 3, 4"},{"key":"5_CR9","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"450","DOI":"10.1007\/978-3-540-74735-2_31","volume-title":"Cryptographic Hardware and Embedded Systems - CHES 2007","author":"AA Bogdanov","year":"2007","unstructured":"Bogdanov, A.A., Knudsen, L.R., Leander, G., Paar, C., Poschmann, A., Robshaw, M., Seurin, Y., Vikkelsoe, C.: PRESENT: an ultra-lightweight block cipher. In: Paillier, P., Verbauwhede, I. (eds.) CHES 2007. LNCS, vol. 4727, pp. 450\u2013466. Springer, Heidelberg (2007). \n                      https:\/\/www.emsec.rub.de\/research\/publications\/present-ultra-lightweight-block-cipher\/\n                      \n                    . 3"},{"key":"5_CR10","unstructured":"Hewlett-Packard Development Company. CeNSE. \n                      http:\/\/www8.hp.com\/us\/en\/hp-information\/environment\/cense.html\n                      \n                    . Accessed 25 Sep 2014. 2"},{"key":"5_CR11","first-page":"1","volume":"17","author":"M D\u00fcll","year":"2015","unstructured":"D\u00fcll, M., Haase, B., Hinterw\u00e4lder, G., Hutter, M., Paar, C., S\u00e1nchez, A.H., Schwabe, P.: High-speed Curve25519 on 8-bit, 16-bit, and 32-bit microcontrollers. Des. Codes Cryptograph. 17, 1\u201322 (2015). \n                      http:\/\/dx.doi.org\/10.1007\/s10623-015-0087-1\n                      \n                    . 4","journal-title":"Des. Codes Cryptograph."},{"key":"5_CR12","unstructured":"Gaj, K., Southern, G., Bachimanchi, R.: Comparison of hardware performance of selected Phase II eSTREAM candidates. In: State of the Art of Stream Ciphers Workshop - SASC 2007 (2007). \n                      http:\/\/www.ecrypt.eu.org\/stream\/papersdir\/2007\/027.pdf\n                      \n                    . 4"},{"key":"5_CR13","unstructured":"Good, T., Benaissa, M.: Hardware results for selected stream cipher candidates. In: Workshop on The State of the Art of Stream Ciphers - SASC 2007, pp. 191\u2013204. ECRYPT (2007). \n                      http:\/\/www.ecrypt.eu.org\/stream\/papersdir\/2007\/023.pdf\n                      \n                    . 4"},{"key":"5_CR14","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"48","DOI":"10.1007\/978-3-642-15031-9_4","volume-title":"Cryptographic Hardware and Embedded Systems, CHES 2010","author":"N Guillermin","year":"2010","unstructured":"Guillermin, N.: A high speed coprocessor for elliptic curve scalar multiplications over \n                      \n                        \n                      \n                      $$\\mathbb{F}_p$$\n                    . In: Mangard, S., Standaert, F.-X. (eds.) CHES 2010. LNCS, vol. 6225, pp. 48\u201364. Springer, Heidelberg (2010). \n                      http:\/\/dx.doi.org\/10.1007\/978-3-642-15031-9_4\n                      \n                    . 4"},{"key":"5_CR15","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"62","DOI":"10.1007\/978-3-540-85053-3_5","volume-title":"Cryptographic Hardware and Embedded Systems \u2013 CHES 2008","author":"T G\u00fcneysu","year":"2008","unstructured":"G\u00fcneysu, T., Paar, C.: Ultra High Performance ECC over NIST Primes on Commercial FPGAs. In: Oswald, E., Rohatgi, P. (eds.) CHES 2008. LNCS, vol. 5154, pp. 62\u201378. Springer, Heidelberg (2008). \n                      http:\/\/iacr.org\/archive\/ches2008\/51540064\/51540064.pdf\n                      \n                    . 4"},{"key":"5_CR16","unstructured":"Henzen, L., Carbognani, F., Felber, N., Fichtner, W.: VLSI hardware evaluation of the stream ciphers Salsa20 and ChaCha and the compression function Rumba. In: International Conference on Signals, Circuits and Systems - SCS 2008, pp. 1\u20135. IEEE (2008). 4, 18"},{"key":"5_CR17","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"crossref","first-page":"31","DOI":"10.1007\/978-3-319-16295-9_2","volume-title":"Progress in Cryptology - LATINCRYPT 2014","author":"G Hinterw\u00e4lder","year":"2015","unstructured":"Hinterw\u00e4lder, G., Moradi, A., Hutter, M., Schwabe, P., Paar, C.: Full-Size high-security ECC implementation on MSP430 microcontrollers. In: Aranha, D.F., Menezes, A. (eds.) LATINCRYPT 2014. LNCS, vol. 8895, pp. 31\u201347. Springer, Heidelberg (2015). \n                      http:\/\/www.emsec.rub.de\/research\/publications\/Curve25519MSPLatin2014\/\n                      \n                    . 4"},{"key":"5_CR18","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"crossref","first-page":"144","DOI":"10.1007\/978-3-642-21040-2_10","volume-title":"Information Security Theory and Practice","author":"M Hutter","year":"2011","unstructured":"Hutter, M., Feldhofer, M., Wolkerstorfer, J.: A cryptographic processor for low-resource devices: canning ECDSA and AES like sardines. In: Ardagna, C.A., Zhou, J. (eds.) WISTP 2011. LNCS, vol. 6633, pp. 144\u2013159. Springer, Heidelberg (2011). \n                      http:\/\/mhutter.org\/papers\/Hutter2011ACryptographicProcessor.pdf\n                      \n                    . 18"},{"key":"5_CR19","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"156","DOI":"10.1007\/978-3-642-38553-7_9","volume-title":"Progress in Cryptology \u2013 AFRICACRYPT 2013","author":"M Hutter","year":"2013","unstructured":"Hutter, M., Schwabe, P.: NaCl on 8-bit AVR microcontrollers. In: Youssef, A., Nitaj, A., Hassanien, A.E. (eds.) AFRICACRYPT 2013. LNCS, vol. 7918, pp. 156\u2013172. Springer, Heidelberg (2013). \n                      http:\/\/cryptojedi.org\/papers\/#avrnacl\n                      \n                    . 4"},{"key":"5_CR20","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"291","DOI":"10.1007\/3-540-36400-5_22","volume-title":"Cryptographic Hardware and Embedded Systems - CHES 2002","author":"M Joye","year":"2003","unstructured":"Joye, M., Yen, S.-M.: The Montgomery powering ladder. In: Kaliski, B.S., Ko\u00e7, \u00c7.K., Paar, C. (eds.) CHES 2002. LNCS, vol. 2523, pp. 291\u2013302. Springer, Heidelberg (2003). \n                      http:\/\/cr.yp.to\/bib\/2003\/joye-ladder.pdf\n                      \n                    . 8"},{"issue":"5","key":"5_CR21","doi-asserted-by":"publisher","first-page":"394","DOI":"10.1109\/TCSII.2009.2019327","volume":"56","author":"J-Y Lai","year":"2009","unstructured":"Lai, J.-Y., Huang, C.-T.: A highly efficient cipher processor for dual-field elliptic curve cryptography. IEEE Trans. Circ. Syst II Express Briefs 56(5), 394\u2013398 (2009). 18","journal-title":"IEEE Trans. Circ. Syst II Express Briefs"},{"key":"5_CR22","unstructured":"Langley, A., Chang, W.-T.: ChaCha20 and Poly1305 based cipher suites for TLS: Internet draft. \n                      https:\/\/tools.ietf.org\/html\/draft-agl-tls-chacha20poly1305-04\n                      \n                    . Accessed 1 Feb 2015. 3"},{"key":"5_CR23","unstructured":"Liu, Z., Wang, H., Gro\u00dfsch\u00e4dl, J., Hu, Z., Verbauwhede, I.: VLSI implementation of double-base scalar multiplication on a twisted edwards curve with an efficiently computable endomorphism. Cryptology ePrint Archive: Report 2015\/421 (2015). \n                      http:\/\/eprint.iacr.org\/2015\/421.pdf\n                      \n                    . 18"},{"key":"5_CR24","unstructured":"Alpha Technology (INT) LTD. Implementation and analysis of Scrypt algorithm in FPGA (proof of concept). Technical report, Alpha Technology, Manchester, England (2013). \n                      https:\/\/alpha-t.net\/wp-content\/uploads\/2013\/11\/Alpha-Technology-Scrypt-Analysis-on-FPGA-proof-of-concept.pdf"},{"key":"5_CR25","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"421","DOI":"10.1007\/978-3-662-43414-7_21","volume-title":"Selected Areas in Cryptography \u2013 SAC 2013","author":"Y Ma","year":"2014","unstructured":"Ma, Y., Liu, Z., Pan, W., Jing, J.: A high-speed elliptic curve cryptographic processor for generic curves over GF(p). In: Lange, T., Lauter, K., Lison\u011bk, P. (eds.) SAC 2013. LNCS, vol. 8282, pp. 421\u2013437. Springer, Heidelberg (2014). \n                      http:\/\/www.iacr.org\/archive\/ches2010\/62250046\/62250046.pdf\n                      \n                    . 4"},{"issue":"9","key":"5_CR26","doi-asserted-by":"publisher","first-page":"1946","DOI":"10.1109\/TCSI.2006.880184","volume":"53","author":"CJ McIvor","year":"2006","unstructured":"McIvor, C.J., McLoone, M., McCanny, J.V.: Hardware elliptic curve cryptographic processor over GF(p). IEEE Trans. Circ. Syst. 53(9), 1946\u20131957 (2006). 4","journal-title":"IEEE Trans. Circ. Syst."},{"key":"5_CR27","doi-asserted-by":"crossref","unstructured":"Meiser, G., Eisenbarth, T., Lemke-Rust, K., Paar, C.: Efficient implementation of eSTREAM ciphers on 8-bit AVR microcontrollers. In: International Symposium on Industrial Embedded Systems - SIES 2008, pp. 58\u201366 (2008). 4","DOI":"10.1109\/SIES.2008.4577681"},{"key":"5_CR28","unstructured":"Mentens, N.: Secure and efficient coprocessor design for cryptographic applications on FPGAs. PhD thesis, Katholieke Universiteit Leuven, Leuven-Heverlee, Belgium (2007). 4"},{"issue":"177","key":"5_CR29","doi-asserted-by":"publisher","first-page":"243","DOI":"10.1090\/S0025-5718-1987-0866113-7","volume":"48","author":"PL Montgomery","year":"1987","unstructured":"Montgomery, P.L.: Speeding the Pollard and elliptic curve methods of factorization. Math. Comput. 48(177), 243\u2013264 (1987). \n                      http:\/\/www.ams.org\/journals\/mcom\/1987-48-177\/S0025-5718-1987-0866113-7\/S0025-5718-1987-0866113-7.pdf\n                      \n                    . 5, 8, 13","journal-title":"Math. Comput."},{"key":"5_CR30","unstructured":"Sakiyama, K., De Mulder, E., Preneel, B., Verbauwhede, I.: A parallel processing hardware architecture for elliptic curve cryptosystems. In: IEEE International Conference on Acoustics, Speech and Signal Processing - ICASSP 2006, vol. 3, pp. 904\u2013907. IEEE (2006). \n                      http:\/\/www.cosic.esat.kuleuven.be\/publications\/article-714.pdf\n                      \n                    . 4"},{"key":"5_CR31","unstructured":"Sample, A.P., Yeager, D.J., Powledge, P.S., Smith, J.R.: Design of a passively-powered, programmable sensing platform for UHF RFID systems. In: 2007 IEEE International Conference on RFID, pp. 149\u2013156. IEEE (2007). \n                      https:\/\/sensor.cs.washington.edu\/pubs\/WISP-IEEE-RFID07-PostConf.pdf\n                      \n                    . 2"},{"key":"5_CR32","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"crossref","first-page":"25","DOI":"10.1007\/978-3-319-05960-0_3","volume-title":"Reconfigurable Computing: Architectures, Tools, and Applications","author":"P Sasdrich","year":"2014","unstructured":"Sasdrich, P., G\u00fcneysu, T.: Efficient elliptic-curve cryptography using Curve25519 on reconfigurable devices. In: Goehringer, D., Santambrogio, M.D., Cardoso, J.M.P., Bertels, K. (eds.) ARC 2014. LNCS, vol. 8405, pp. 25\u201336. Springer, Heidelberg (2014). \n                      https:\/\/www.ei.rub.de\/media\/sh\/veroeffentlichungen\/2014\/03\/25\/paperarc14 curve25519.pdf\n                      \n                    . 4"},{"issue":"4","key":"5_CR33","doi-asserted-by":"publisher","first-page":"449","DOI":"10.1109\/TC.2003.1190586","volume":"52","author":"A Satoh","year":"2003","unstructured":"Satoh, A., Takano, K.: A scalable dual-field elliptic curve cryptographic processor. IEEE Trans. Comput. 52(4), 449\u2013460 (2003). 18","journal-title":"IEEE Trans. Comput."},{"issue":"1","key":"5_CR34","first-page":"121","volume":"4","author":"J Sugier","year":"2013","unstructured":"Sugier, J.: Low-cost hardware implementations of Salsa20 stream cipher in programmable devices. J. Pol. Saf. Reliab. Assoc. 4(1), 121\u2013128 (2013). \n                      http:\/\/jpsra.am.gdynia.pl\/upload\/SSARS2013PDF\/VOL1\/SSARS2013-Sugier.pdf\n                      \n                    . 4","journal-title":"J. Pol. Saf. Reliab. Assoc."},{"key":"5_CR35","doi-asserted-by":"crossref","unstructured":"Varchola, M., G\u00fcneysu, T., Mischke, O.: MicroECC: a lightweight reconfigurable elliptic curve crypto-processor. In: 2011 International Conference on Reconfigurable Computing and FPGAs, pp. 204\u2013210 (2011). 4","DOI":"10.1109\/ReConFig.2011.61"},{"key":"5_CR36","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1007\/978-3-642-40392-7_1","volume-title":"Lightweight Cryptography for Security and Privacy","author":"E Wenger","year":"2013","unstructured":"Wenger, E.: A lightweight ATmega-based application-specific instruction-set processor for elliptic curve cryptography. In: Avoine, G., Kara, O. (eds.) LightSec 2013. LNCS, vol. 8162, pp. 1\u201315. Springer, Heidelberg (2013). \n                      https:\/\/online.tugraz.at\/tug_online\/voe_main2.getvolltext?pCurrPk=70640\n                      \n                    . 18"},{"key":"5_CR37","unstructured":"Wolkerstorfer, J.: Is elliptic-curve cryptography suitable for small devices? In: Oswald, E. (ed.) Workshop on RFID and Lightweight Crypto - RFIDsec 2005 (2005). 18"},{"key":"5_CR38","unstructured":"Yan, J., Heys, H.M.: Hardware implementation of the Salsa20 and Phelix stream ciphers. In: Canadian Conference on Electrical and Computer Engineering - CCECE 2007, pp. 1125\u20131128. IEEE (2007). \n                      http:\/\/www.engr.mun.ca\/~howard\/PAPERS\/ccece07_yan.pdf\n                      \n                    . 4"}],"container-title":["Lecture Notes in Computer Science","Cryptographic Hardware and Embedded Systems -- CHES 2015"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-662-48324-4_5","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2019,8,26]],"date-time":"2019-08-26T20:03:07Z","timestamp":1566849787000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/978-3-662-48324-4_5"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2015]]},"ISBN":["9783662483237","9783662483244"],"references-count":38,"URL":"https:\/\/doi.org\/10.1007\/978-3-662-48324-4_5","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2015]]},"assertion":[{"value":"1 September 2015","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}}]}}