Scholarlink

In this paper, we propose a large-state tweakable block cipher dubbed ASURA, which is optimized for software implementation using AES instructions on AArch64 processors. ASURA takes a 256-bit plaintext, 256-bit secret key, and 128-bit tweak as inputs. Unlike existing AES-based ciphers such as Ghidle and Pholkos, the ASURA round function integrates AES rounds and their inverse operations. For the linear layer of the round function, we employ an efficient byte-wise shuffle using only a single vuzpq_u8 instruction, enabling faster diffusion than the 32-bit shuffle in Pholkos-256 and the matrix multiplication over \(GF(2^{64})\) in Ghidle-256. Leveraging NEON instructions in AArch64, we optimize the balance of AES and shuffle layers for both security and performance. Finally, we show that ASURA outperforms Pholkos-256 and Ghidle-256 by 64% and 74%, respectively, in single-block encryption and by over 40% in parallel processing on AArch64, and remains competitive even in x86 environments.

错误：搜索内容不能为空，请输入英文关键词
错误：关键词超出字数限制，请精简
高级检索

ASURA: An Efficient Large-State Tweakable Block Cipher for ARM Environment

  • 会议论文

  • 发表日期：

    2025年

查看全文
  • Atsushi Tanaka,
  • Rentaro Shiba,
  • Kosei Sakamoto,
  • Mostafizar Rahman,
  • Takuro Shiraya,
  • Takanori Isobe

摘要

In this paper, we propose a large-state tweakable block cipher dubbed ASURA, which is optimized for software implementation using AES instructions on AArch64 processors. ASURA takes a 256-bit plaintext, 256-bit secret key, and 128-bit tweak as inputs. Unlike existing AES-based ciphers such as Ghidle and Pholkos, the ASURA round function integrates AES rounds and their inverse operations. For the linear layer of the round function, we employ an efficient byte-wise shuffle using only a single vuzpq_u8 instruction, enabling faster diffusion than the 32-bit shuffle in Pholkos-256 and the matrix multiplication over \(GF(2^{64})\) in Ghidle-256. Leveraging NEON instructions in AArch64, we optimize the balance of AES and shuffle layers for both security and performance. Finally, we show that ASURA outperforms Pholkos-256 and Ghidle-256 by 64% and 74%, respectively, in single-block encryption and by over 40% in parallel processing on AArch64, and remains competitive even in x86 environments.