The DOI matches its Crossref record; 19 of the 19 references it cites were found in a registry or an index.
Faster and Timing-Attack Resistant AES-GCM
Open accessAbstract
We present a bitsliced implementation of AES encryption in counter mode for 64-bit Intel processors. Running at 7.59 cycles/byte on a Core 2, it is up to 25% faster than previous implementations, while simultaneously offering protection against timing attacks. In particular, it is the only cache-timing-attack resistant implementation offering competitive speeds for stream as well as for packet encryption: for 576-byte packets, we improve performance over previous bitsliced implementations by more than a factor of 2. We also report more than 30% improved speeds for lookup-table based Galois/Counter mode authentication, achieving 10.68 cycles/byte for authenticated encryption. Furthermore, we present the first constant-time implementation of AES-GCM that has a reasonable speed of 21.99 cycles/byte, thus offering a full suite of timing-analysis resistant software for authenticated encryption.
Overview
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Integrity signals
Registry
Cites
Statistics
Verification
Claims the paper makes
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Self-check
Percentages, sums and reported differences re-computed from the paper’s own numbers.
The self-check needs the paper’s full text.
Citations
Cites
Timing Attacks on Implementations of Diffie-Hellman, RSA, DSS, and Other Systems
Kocher, P. C. (1996) · Lecture Notes in Computer Science · doi:10.1007/3-540-68697-5_9 · Cited by 4,387
Cache Attacks and Countermeasures: The Case of AES
Osvik, D. A., Shamir, A., & Tromer, E. (2006) · Lecture Notes in Computer Science · doi:10.1007/11605805_1 · Cited by 1,352
Canright, D. (2005) · Lecture Notes in Computer Science · doi:10.1007/11545262_32 · Cited by 530
The Security and Performance of the Galois/Counter Mode (GCM) of Operation
McGrew, D. A., & Viega, J. (2004) · Lecture Notes in Computer Science · doi:10.1007/978-3-540-30556-9_27 · Cited by 522
Cache-Collision Timing Attacks Against AES
Bonneau, J., & Mironov, I. (2006) · Lecture Notes in Computer Science · doi:10.1007/11894063_16 · Cited by 367
The Galois/Counter Mode of Operation (GCM)
McGrew, D. A., & Viega, J. (2005) · Cited by 332
A fast new DES implementation in software
Biham, E. (1997) · Lecture Notes in Computer Science · doi:10.1007/bfb0052352 · Cited by 328
Theoretical Use of Cache Memory as a Cryptanalytic Side-Channel.
Page, D. (2002) · Cited by 268
Side channel cryptanalysis of product ciphers
Kelsey, J., Schneier, B., Wagner, D., & Hall, C. (2000) · Journal of Computer Security · doi:10.3233/jcs-2000-82-304 · Cited by 257
Serpent: A New Block Cipher Proposal
Biham, E., Anderson, R., & Knudsen, L. R. (1998) · Lecture notes in computer science · doi:10.1007/3-540-69710-1_15 · Cited by 256
Cited by
(2016) · IACR Cryptology ePrint Archive · Cited by 1,288
Efficient Cache Attacks on AES, and Countermeasures
Tromer, E., Osvik, D. A., & Shamir, A. (2010) · Journal of Cryptology · doi:10.1007/s00145-009-9049-y · Cited by 444
HomeAlone: Co-residency Detection in the Cloud via Side-Channel Analysis
Zhang, Y., Juels, A., Oprea, A., & Reiter, M. K. (2011) · 2011 IEEE Symposium on Security and Privacy · doi:10.1109/sp.2011.31 · Cited by 340
The Software Performance of Authenticated-Encryption Modes
Krovetz, T., & Rogaway, P. (2011) · Lecture Notes in Computer Science · doi:10.1007/978-3-642-21702-9_18 · Cited by 262
Implementation of Bitsliced AES Encryption on CUDA-Enabled GPU
Nishikawa, N., Amano, H., & Iwai, K. (2017) · Lecture Notes in Computer Science · doi:10.1007/978-3-319-64701-2_20 · Cited by 42
Metadata
- Authors
- Käsper, E., & Schwabe, P.
- Venue
- Lecture Notes in Computer Science
- Publisher
- Springer Berlin Heidelberg
- Published
- 2009
- Volume
- 2009
- Pages
- 1-17
- ISSN
- 0302-9743 (ISSN-L)
- 1611-3349
- OpenAlex
- W1523982624
- Cited by
- 265
- References
- 19
- FWCI
- 12.69
- Type
- conference paper
- Language
- en
- Open access
- green
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
How to cite
Cite CoChat for the checks on this page, and the paper for its own findings.
- This page
- CoChat. (2026). Citation check: Faster and Timing-Attack Resistant AES-GCM. https://app.cochat.ai/papers/10.1007/978-3-642-04138-9_1
- The paper
- Käsper, E., & Schwabe, P. (2009). Faster and Timing-Attack Resistant AES-GCM. Lecture Notes in Computer Science. https://doi.org/10.1007/978-3-642-04138-9_1
Data sources
Bibliographic data: Semantic Scholar, OpenAlex, Crossref.
Contains information from the Semantic Scholar Academic Graph Datasets, made available under the ODC Attribution License (ODC-BY 1.0).
Semantic Scholar’s data is described in: Kinney, R., et al. (2023). The Semantic Scholar Open Data Platform. arXiv:2301.10140.
