Energy evaluation of software implementations of block ciphers under memory constraints

• Main Authors: Großschädl, Johann, Tillich, Stefan, Rechberger, Christian, Hofmann, Michael, Medwed, Marcel
• Format: Conference Proceeding
• Language: English
• Subjects: Information systems; Information systems > Data management systems; Information systems > Data management systems > Data structures; Information systems > Data management systems > Data structures > Data layout; Information systems > Data management systems > Data structures > Data layout > Data encryption; Security and privacy; Security and privacy > Cryptography; Theory of computation; Theory of computation > Computational complexity and cryptography
• DOI: 10.5555/1266366.1266607

Software implementations of modern block ciphers often require large lookup tables along with code size increasing optimizations like loop unrolling to reach peak performance on general-purpose processors. Therefore, block ciphers are difficult to implement efficiently on embedded devices like cell phones or sensor nodes where run-time memory and program ROM are scarce resources. In this paper we analyze and compare the performance, energy consumption, run-time memory requirements, and code size of the five block ciphers RC6, Rijndael, Serpent, Twofish, and XTEA on the StrongARM SA-1100 processor. Most previous evaluations of block ciphers considered performance as the sole metric of interest and did not care about memory requirements or code size. In contrast to previous work, our study of the performance and energy characteristics of block ciphers has been conducted with "lightweight" implementations which restrict the size of lookup tables to 1 kB and also impose constraints on the code size. We found that Rijndael and RC6 can be well optimized for high performance and energy efficiency, while at the same time meeting the demand for low memory (RAM and ROM) footprint. In addition, we discuss the impact of key expansion and modes of operation on the overall performance and energy consumption of each block cipher. Our simulation results show that RC6 is the most energy-efficient block cipher under memory constraints and thus the best choice for resource-restricted devices.