{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,10,12]],"date-time":"2025-10-12T03:07:14Z","timestamp":1760238434944,"version":"build-2065373602"},"reference-count":37,"publisher":"MDPI AG","issue":"3","license":[{"start":{"date-parts":[[2020,8,9]],"date-time":"2020-08-09T00:00:00Z","timestamp":1596931200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"DOI":"10.13039\/501100001691","name":"Japan Society for the Promotion of Science","doi-asserted-by":"publisher","award":["JP18H05289"],"award-info":[{"award-number":["JP18H05289"]}],"id":[{"id":"10.13039\/501100001691","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Cryptography"],"abstract":"<jats:p>SAEAES is the authenticated encryption algorithm instantiated by combining the SAEB mode of operation with AES, and a candidate of the NIST\u2019s lightweight cryptography competition. Using AES gives the advantage of backward compatibility with the existing accelerators and coprocessors that the industry has invested in so far. Still, the newer lightweight block cipher (e.g., GIFT) outperforms AES in compact implementation, especially with the side-channel attack countermeasure such as threshold implementation. This paper aims to implement the first threshold implementation of SAEAES and evaluate the cost we are trading with the backward compatibility. We design a new circuit architecture using the column-oriented serialization based on the recent 3-share and uniform threshold implementation (TI) of the AES S-box based on the generalized changing of the guards. Our design uses 18,288 GE with AES\u2019s occupation reaching 97% of the total area. Meanwhile, the circuit area is roughly three times the conventional SAEB-GIFT implementation (6229 GE) because of a large memory size needed for the AES\u2019s non-linear key schedule and the extended states for satisfying uniformity in TI.<\/jats:p>","DOI":"10.3390\/cryptography4030023","type":"journal-article","created":{"date-parts":[[2020,8,10]],"date-time":"2020-08-10T05:07:23Z","timestamp":1597036043000},"page":"23","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["Hardware Performance Evaluation of Authenticated Encryption SAEAES with Threshold Implementation"],"prefix":"10.3390","volume":"4","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-9356-534X","authenticated-orcid":false,"given":"Takeshi","family":"Sugawara","sequence":"first","affiliation":[{"name":"Department of Informatics, The University of Electro-Communications, Tokyo 182-8585, Japan"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"1968","published-online":{"date-parts":[[2020,8,9]]},"reference":[{"key":"ref_1","doi-asserted-by":"crossref","first-page":"450","DOI":"10.1007\/978-3-540-74735-2_31","article-title":"PRESENT: An Ultra-Lightweight Block Cipher","volume":"Volume 4727","author":"Paillier","year":"2007","journal-title":"Cryptographic Hardware and Embedded Systems\u2014CHES 2007, Proceedings of the 9th International Workshop, Vienna, Austria, 10\u201313 September 2007"},{"key":"ref_2","unstructured":"National Institute of Standards and Technology (NIST) (2020, August 07). Submission Requirements and Evaluation Criteria for the Lightweight Cryptography Standardization Process, Available online: https:\/\/csrc.nist.gov\/Projects\/lightweight-cryptography."},{"key":"ref_3","first-page":"388","article-title":"Differential Power Analysis","volume":"Volume 1666","author":"Wiener","year":"1999","journal-title":"Advances in Cryptology\u2014CRYPTO \u201999, Proceedings of the 19th Annual International Cryptology Conference, Santa Barbara, CA, USA, 15\u201319 August 1999"},{"key":"ref_4","unstructured":"Mangard, S., Oswald, E., and Popp, T. (2007). Power Analysis Attacks\u2014Revealing the Secrets of Smart Cards, Springer."},{"key":"ref_5","unstructured":"S\u00f6nmez, M. (2019, January 2\u20134). On the NIST Lightweight Cryptography Standardization. Proceedings of the 23rd Workshop on Elliptic Curve Cryptography (ECC 2019), Bochum, Germany."},{"key":"ref_6","first-page":"529","article-title":"Threshold Implementations Against Side-Channel Attacks and Glitches","volume":"Volume 4307","author":"Ning","year":"2006","journal-title":"Information and Communications Security, Proceedings of the 8th International Conference, ICICS 2006, Raleigh, NC, USA, 4\u20137 December 2006"},{"key":"ref_7","first-page":"463","article-title":"Private Circuits: Securing Hardware against Probing Attacks","volume":"Volume 2729","author":"Boneh","year":"2003","journal-title":"Advances in Cryptology\u2014CRYPTO 2003, Proceedings of the 23rd Annual International Cryptology Conference, Santa Barbara, CA, USA, 17\u201321 August 2003"},{"key":"ref_8","doi-asserted-by":"crossref","unstructured":"Gro\u00df, H., Wenger, E., Dobraunig, C., and Ehrenh\u00f6fer, C. (2015, January 26\u201328). Suit up!\u2014Made-to-Measure Hardware Implementations of ASCON. Proceedings of the 2015 Euromicro Conference on Digital System Design, Funchal, Portugal.","DOI":"10.1109\/DSD.2015.14"},{"key":"ref_9","doi-asserted-by":"crossref","unstructured":"Arribas, V., Nikova, S., and Rijmen, V. (2018, January 29\u201331). Guards in Action: First-Order SCA Secure Implementations of Ketje Without Additional Randomness. Proceedings of the 21st Euromicro Conference on Digital System Design (DSD), Prague, Czech Republic.","DOI":"10.1109\/DSD.2018.00088"},{"key":"ref_10","unstructured":"Caforio, A., Balli, F., and Banik, S. (2020, August 07). Energy Analysis of Lightweight AEAD Circuits. Cryptology ePrint Archive, Report 2020\/607. Available online: https:\/\/eprint.iacr.org\/2020\/607."},{"key":"ref_11","first-page":"79","article-title":"Uniform First-Order Threshold Implementations","volume":"Volume 10532","author":"Beyne","year":"2016","journal-title":"Proceedings of the International Conference on Selected Areas in Cryptography, Ottawa, ON, Canada, 10\u201312 August 2016"},{"key":"ref_12","first-page":"433","article-title":"Constructing TI-Friendly Substitution Boxes Using Shift-Invariant Permutations","volume":"Volume 11405","author":"Gao","year":"2019","journal-title":"Topics in Cryptology\u2014CT-RSA 2019, Proceedings of the The Cryptographers\u2019 Track at the RSA Conference 2019, San Francisco, CA, USA, 4\u20138 March 2019, LNCS"},{"key":"ref_13","first-page":"66","article-title":"Lightweight Authenticated Encryption Mode of Operation for Tweakable Block Ciphers","volume":"2020","author":"Naito","year":"2020","journal-title":"IACR Trans. Cryptogr. Hardw. Embed. Syst."},{"key":"ref_14","first-page":"705","article-title":"Lightweight Authenticated Encryption Mode Suitable for Threshold Implementation","volume":"Volume 12106","author":"Canteaut","year":"2020","journal-title":"Advances in Cryptology\u2014EUROCRYPT 2020, Proceedings of the 39th Annual International Conference on the Theory and Applications of Cryptographic Techniques, Zagreb, Croatia, 10\u201314 May 2020"},{"key":"ref_15","doi-asserted-by":"crossref","first-page":"192","DOI":"10.46586\/tches.v2018.i2.192-217","article-title":"SAEB: A Lightweight Blockcipher-Based AEAD Mode of Operation","volume":"2018","author":"Naito","year":"2018","journal-title":"IACR Trans. Cryptogr. Hardw. Embed. Syst."},{"key":"ref_16","unstructured":"National Institute of Standards and Technology (NIST) (2001). Federal Information Processing Standards Publication 197: ADVANCED ENCRYPTION STANDARD (AES)."},{"key":"ref_17","unstructured":"Gueron, S., Jha, A., and Nandi, M. (2020, August 07). COMET: COunter Mode Encryption with Authentication Tag, Available online: https:\/\/csrc.nist.gov\/CSRC\/media\/Projects\/lightweight-cryptography\/documents\/round-2\/spec-doc-rnd2\/comet-spec-round2.pdf."},{"key":"ref_18","unstructured":"Chakraborty, B., and Nandi, M. (2020, August 07). MixFeed, Available online: https:\/\/csrc.nist.gov\/CSRC\/media\/Projects\/lightweight-cryptography\/documents\/round-2\/spec-doc-rnd2\/mixFeed-spec-round2.pdf."},{"key":"ref_19","unstructured":"Naito, Y., Matsui, M., Sakai, Y., Suzuki, D., Sakiyama, K., and Sugawara, T. (2020, August 07). SAEAES, Available online: https:\/\/csrc.nist.gov\/CSRC\/media\/Projects\/lightweight-cryptography\/documents\/round-2\/spec-doc-rnd2\/SAEAES-spec-round2.pdf."},{"key":"ref_20","first-page":"321","article-title":"GIFT:A Small Present\u2014Towards Reaching the Limit of Lightweight Encryption","volume":"Volume 10529","author":"Banik","year":"2017","journal-title":"Proceedings of the Cryptographic Hardware and Embedded Systems (CHES), LNCS"},{"key":"ref_21","first-page":"123","article-title":"The SKINNY Family of Block Ciphers and Its Low-Latency Variant MANTIS","volume":"Volume 9815","author":"Robshaw","year":"2016","journal-title":"Advances in Cryptology\u2014CRYPTO 2016, Proceedings of the 36th Annual International Cryptology Conference, Santa Barbara, CA, USA, 14\u201318 August 2016"},{"key":"ref_22","unstructured":"National Institute of Standards and Technology (NIST) (2020, August 07). Announcing the ADVANCED ENCRYPTION STANDARD (AES). FIPS PUB 197, Available online: https:\/\/nvlpubs.nist.gov\/nistpubs\/FIPS\/NIST.FIPS.197.pdf."},{"key":"ref_23","first-page":"69","article-title":"Pushing the Limits: A Very Compact and a Threshold Implementation of AES","volume":"Volume 6632","author":"Paterson","year":"2011","journal-title":"Advances in Cryptology\u2014EUROCRYPT 2011, Proceedings of the 30th Annual International Conference on the Theory and Applications of Cryptographic Techniques, Tallinn, Estonia, 15\u201319 May 2011"},{"key":"ref_24","doi-asserted-by":"crossref","first-page":"1188","DOI":"10.1109\/TCAD.2015.2419623","article-title":"Trade-Offs for Threshold Implementations Illustrated on AES","volume":"34","author":"Bilgin","year":"2015","journal-title":"IEEE Trans. Comput. Aided Des. Integr. Circuits Syst."},{"key":"ref_25","first-page":"50","article-title":"Toward More Efficient DPA-Resistant AES Hardware Architecture Based on Threshold Implementation","volume":"Volume 10348","author":"Guilley","year":"2017","journal-title":"Constructive Side-Channel Analysis and Secure Design, Proceedings of the 8th International Workshop, COSADE 2017, Paris, France, 13\u201314 April 2017"},{"key":"ref_26","first-page":"137","article-title":"Changing of the Guards: A Simple and Efficient Method for Achieving Uniformity in Threshold Sharing","volume":"Volume 10529","author":"Fischer","year":"2017","journal-title":"Cryptographic Hardware and Embedded Systems\u2014CHES 2017, Proceedings of the 19th International Conference, Taipei, Taiwan, 25\u201328 September 2017"},{"key":"ref_27","first-page":"123","article-title":"3-Share Threshold Implementation of AES S-box without Fresh Randomness","volume":"2019","author":"Sugawara","year":"2019","journal-title":"IACR Trans. Cryptogr. Hardw. Embed. Syst."},{"key":"ref_28","unstructured":"Balli, F., Caforio, A., and Banik, S. (2020, August 07). Low-latency Meets Low-Area: An Improved Bit-Sliding Technique for AES, SKINNY and GIFT. Cryptology ePrint Archive, Report 2020\/608. Available online: https:\/\/eprint.iacr.org\/2020\/608."},{"key":"ref_29","doi-asserted-by":"crossref","unstructured":"Dworkin, M. (2017). Special Publication 800-38D: Recommendation for Block Cipher Modes of Operation: Galois\/Counter Mode (GCM) and GMAC.","DOI":"10.6028\/NIST.SP.800-38b"},{"key":"ref_30","doi-asserted-by":"crossref","unstructured":"Salowey, J., Choudhury, A., and McGrew, D. (2008). RFC5288: AES Galois Counter Mode (GCM) Cipher Suites for TLS, Internet Engineering Task Force.","DOI":"10.17487\/rfc5288"},{"key":"ref_31","doi-asserted-by":"crossref","first-page":"292","DOI":"10.1007\/s00145-010-9085-7","article-title":"Secure Hardware Implementation of Nonlinear Functions in the Presence of Glitches","volume":"24","author":"Nikova","year":"2011","journal-title":"J. Cryptol."},{"key":"ref_32","doi-asserted-by":"crossref","unstructured":"Wegener, F., and Moradi, A. (2018). A First-Order SCA Resistant AES Without Fresh Randomness. Constructive Side-Channel Analysis and Secure Design, Proceedings of the 9th International Workshop, COSADE 2018, Singapore, 23\u201324 April 2018, Springer.","DOI":"10.1007\/978-3-319-89641-0_14"},{"key":"ref_33","first-page":"824","article-title":"Hardware Implementations of NIST Lightweight Cryptographic Candidates: A First Look","volume":"2019","author":"Rezvani","year":"2019","journal-title":"IACR Cryptol. ePrint Arch."},{"key":"ref_34","first-page":"441","article-title":"A Very Compact S-Box for AES","volume":"Volume 3659","author":"Rao","year":"2005","journal-title":"Cryptographic Hardware and Embedded Systems\u2014CHES 2005, Proceedings of the 7th International Workshop, Edinburgh, UK, 29 August\u20131 September 2005"},{"key":"ref_35","unstructured":"NanGate (2020, August 07). NanGate FreePDK45 Open Cell Library. Available online: https:\/\/si2.org\/open-cell-library."},{"key":"ref_36","doi-asserted-by":"crossref","unstructured":"Oshida, H., Ueno, R., Homma, N., and Aoki, T. (2018). On Masked Galois-Field Multiplication for Authenticated Encryption Resistant to Side Channel Analysis. Constructive Side-Channel Analysis and Secure Design, Proceedings of the 9th International Workshop, COSADE 2018, Singapore, 23\u201324 April 2018, Springer.","DOI":"10.1007\/978-3-319-89641-0_3"},{"key":"ref_37","doi-asserted-by":"crossref","first-page":"322","DOI":"10.1007\/s00145-010-9086-6","article-title":"Side-Channel Resistant Crypto for Less than 2300 GE","volume":"24","author":"Poschmann","year":"2011","journal-title":"J. Cryptol."}],"container-title":["Cryptography"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/2410-387X\/4\/3\/23\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,11]],"date-time":"2025-10-11T09:58:26Z","timestamp":1760176706000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/2410-387X\/4\/3\/23"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020,8,9]]},"references-count":37,"journal-issue":{"issue":"3","published-online":{"date-parts":[[2020,9]]}},"alternative-id":["cryptography4030023"],"URL":"https:\/\/doi.org\/10.3390\/cryptography4030023","relation":{},"ISSN":["2410-387X"],"issn-type":[{"type":"electronic","value":"2410-387X"}],"subject":[],"published":{"date-parts":[[2020,8,9]]}}}