Cryptography Reference
In-Depth Information
Hence, we can find a message block
m
∗
such that
H
3
=
d
for an arbitrary value of
d
with a complexity of about 2 compression function evaluations. Therefore, we
can find a collision for the 11 rounds of the compression function (and the hash
function) of Lesamnta-LW with a complexity of about 2
97
compression function
evaluations.
6
Implementation Results
6.1
Low-Area ASIC Implementation Results
We have estimated speed and gate count of a hardware architecture of Lesamnta-
LW, MAME, and SHA-256. In Table 2, our results
1
are compared to known
results on other hash functions such as BLAKE-32 [1], ECHO-224/256 [4],
Fugue-256 [24], Gr
φ
stl-224/256 [23], Luffa-224/256 [15], and Skein [21]. It is
clear that Lesamnta-LW achieves very small implementation and it is substan-
tially smaller than most SHA-3 Round-2 candidates. For designs with a com-
parable size, Lesamnta-LW offers a reasonably fast speed for the same clock
frequency.
Table 2.
Our ASIC implementation estimates of Lesamnta-LW, MAME, and SHA-
256 with known results on other hash functions. For Imple. Scope, Full means a fully
autonomous implementation including the complete functionality of a hash function
while Core means an implementation of core functionality comprising only important
parts of a hash function such as the compression function. The digest size of SHA-3
candidates is omitted.
Algorithm
Impl. Logic
Area
Throughput Clock Throughput/ Throughput
Scope Process (Kgates)
(Mbit/s)
(MHz)
Area
@30MHz
(Mbit/s)
BLAKE [44]
Full
0.35
μ
m
25.57
15.4
31.25
0.60
14.78
ECHO [34]
Full
0.13
μ
m
82.8
373
66.6
4.50
168.02
Fugue [24]
Full
90 nm
59.22
2000
500
33.77
120.00
Gr
φ
stl[44]
Full
0.35
μ
m
14.62
145.9
55.87
99.79
78.34
Luffa [31]
Full
0.13
μ
m
18.26
2461
250
134.78
295.32
0.35
μ
m
Skein [44]
Full
12.89
19.8
80
1.54
7.43
Core 0.18
μ
m
MAME [45]
8.1
440
333
54.32
39.64
SHA-256 [20]
Full
0.35
μ
m
10.9
22.5
50
2.06
13.5
T-Quark
16 [2] Full
0.18
μ
m
4.64
0.05
0.1
0.01
15
×
Lesamnta-LW
Full
90 nm
8.24
125.55
188.3
15.31
20.00
MAME
Full
90 nm
12.95
1164.48
436.68
89.9
80.0
SHA-256
Full
90 nm
14.6
1766
220.8
120.0
239.9
1
Note that the values in Throughput/Area and Throughput@30MHz could con-
siderably vary, depending on the technology (logic process). Hence implementa-
tion comparisons between these algorithms using the same technology will be
welcome.
Search WWH ::
Custom Search