Report on lightweight cryptography
Open accessAbstract
leadership for the Nation's measurement and standards infrastructure.ITL develops tests, test methods, reference data, proof of concept implementations, and technical analyses to advance the development and productive use of information technology.ITL's responsibilities include the development of management, administrative, technical, and physical standards and guidelines for the cost-effective security and privacy of other than national security-related information in federal information systems.
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Integrity signals
Registry
Cites
Statistics
Claims the paper makes
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
NIST is currently standardizing lightweight cryptography methods for constrained devices through an open competition-like process, with the second round completed in 2020.
“It is noteworthy that, NIST is currently standardizing the lightweight cryptography methods for constrained devices through an open competition-like process (the second round of the process completed in 2020) [107].”
From Zero Trust Architecture (ZTA): A Comprehensive Survey (2022) · cites this paper as [107]
The Introduction and §3.4 describe NIST’s plans to standardize lightweight algorithms for constrained devices through an open submission and evaluation process. The 2017 report does not support the claim that a second round was completed in 2020; it describes the process as prospective. (LLM, conf=0.88)
Experimental — accuracy not yet measuredThe lightweight cryptography methods included in NIST's initial report may only be seen as a reference until the standardization process is concluded.
“Therefore, the aforementioned methods may only be seen as a reference which were included in NIST's initial report on lightweight cryptography and until the standardization process is concluded.”
From Zero Trust Architecture (ZTA): A Comprehensive Survey (2022) · cites this paper as [107]
Self-check
Percentages, sums and reported differences re-computed from the paper’s own numbers.
The self-check needs the paper’s full text.
Cites
PRESENT: An Ultra-Lightweight Block Cipher
Bogdanov, A., Knudsen, L. R., Leander, G., Paar, C., Poschmann, A., Robshaw, M. J. B., Seurin, Y., & Vikkelsoe, C. (2007) · Lecture Notes in Computer Science · doi:10.1007/978-3-540-74735-2_31 · Cited by 2,867 · see citing works
Rivest, R. L. (1995) · Lecture notes in computer science · doi:10.1007/3-540-60590-8_7 · Cited by 894 · see citing works
PRINCE – A Low-Latency Block Cipher for Pervasive Computing Applications
Borghoff, J., Canteaut, A., Güneysu, T. E., Kavun, E. B., Knežević, M., Knudsen, L. R., Leander, G., Nikov, V., Paar, C., Rechberger, C., et al. (2012) · Lecture notes in computer science · doi:10.1007/978-3-642-34961-4_14 · Cited by 785 · see citing works
SHA-3 standard: permutation-based hash and extendable-output functions
National Institute of Standards and Technology (US) (2015) · doi:10.6028/nist.fips.202 · Cited by 783 · see citing works
Guo, J., Peyrin, T., Poschmann, A. Y., & Robshaw, M. J. B. (2011) · Lecture notes in computer science · doi:10.1007/978-3-642-23951-9_22 · Cited by 775 · see citing works
Authenticating Pervasive Devices with Human Protocols
Juels, A., & Weis, S. A. (2005) · Lecture notes in computer science · doi:10.1007/11535218_18 · Cited by 722 · see citing works
Strong Authentication for RFID Systems Using the AES Algorithm
Feldhofer, M., Dominikus, S., & Wolkerstorfer, J. (2004) · Lecture notes in computer science · doi:10.1007/978-3-540-28632-5_26 · Cited by 718 · see citing works
Advanced Encryption Standard (AES)
(2001) · doi:10.6028/nist.fips.197 · Cited by 700 · see citing works
The SIMON and SPECK Families of Lightweight Block Ciphers.Preprint
Beaulieu, R., Shors, D., Smith, J., et al. (2013) · IACR Cryptology ePrint Archive · Cited by 616 · see citing works
Piccolo: An Ultra-Lightweight Blockcipher
Shibutani, K., Isobe, T., Hiwatari, H., Mitsuda, A., Akishita, T., & Shirai, T. (2011) · Lecture notes in computer science · doi:10.1007/978-3-642-23951-9_23 · Cited by 571 · see citing works
Grain: A stream cipher for constrained environments
Hell, M., Johansson, T., & Meier, W. (2007) · International Journal of Wireless and Mobile Computing · doi:10.1504/ijwmc.2007.013798 · Cited by 568 · see citing works
The PHOTON Family of Lightweight Hash Functions
Guo, J., Peyrin, T., & Poschmann, A. Y. (2011) · Lecture notes in computer science · doi:10.1007/978-3-642-22792-9_13 · Cited by 563 · see citing works
TEA, a tiny encryption algorithm
Wheeler, D. J., & Needham, R. M. (1995) · Lecture notes in computer science · doi:10.1007/3-540-60590-8_29 · Cited by 559 · see citing works
The 128-Bit Blockcipher CLEFIA (Extended Abstract)
Shirai, T., Shibutani, K., Akishita, T., et al. (2007) · Lecture notes in computer science · doi:10.1007/978-3-540-74619-5_12 · Cited by 488 · see citing works
Pushing the Limits: A Very Compact and a Threshold Implementation of AES
Moradi, A., Poschmann, A. Y., Ling, S., Paar, C., & Wang, H. (2011) · Lecture notes in computer science · doi:10.1007/978-3-642-20465-4_6 · Cited by 466 · see citing works
Recommendation for block cipher modes of operation :
Dworkin, M. J. (2007) · doi:10.6028/nist.sp.800-38d · Cited by 463 · cited 5× · see citing works
“NIST also approves standalone MACs, CMAC [19], GMAC [17], and HMAC [68], to be used for generating and verifying tags to provide message authentication.”
MethodInfluentialCamellia: A 128-Bit Block Cipher Suitable for Multiple Platforms — Design andAnalysis
Aoki, K., Ichikawa, T., Kanda, M., et al. (2001) · Lecture notes in computer science · doi:10.1007/3-540-44983-3_4 · Cited by 447 · see citing works
spongent: A Lightweight Hash Function
Bogdanov, A., Knežević, M., Leander, G., Toz, D., Varıcı, K., & Verbauwhede, I. M. R. (2011) · Lecture notes in computer science · doi:10.1007/978-3-642-23951-9_21 · Cited by 369 · see citing works
(2015) · doi:10.6028/nist.fips.180-4 · Cited by 359 · see citing works
Recommendation for block cipher modes of operation :
Dworkin, M. J. (2005) · doi:10.6028/nist.sp.800-38b-2005 · Cited by 316 · see citing works
Recommendation for block cipher modes of operation :
Dworkin, M. J. (2007) · doi:10.6028/nist.sp.800-38c · Cited by 307 · see citing works
Leander, G., Paar, C., Poschmann, A. Y., & Schramm, K. (2007) · Lecture notes in computer science · doi:10.1007/978-3-540-74619-5_13 · Cited by 287 · see citing works
Aumasson, J.-P., Henzen, L., Meier, W., et al. (2010) · Lecture notes in computer science · doi:10.1007/978-3-642-15031-9_1 · Cited by 280 · see citing works
Cannière, C. D., & Preneel, B. (2008) · Lecture notes in computer science · doi:10.1007/978-3-540-68351-3_18 · Cited by 243 · see citing works
$\textnormal{\textsc{TWINE}}$: A Lightweight Block Cipher for Multiple Platforms
Suzaki, T., Minematsu, K., Morioka, S., & Kobayashi, E. (2013) · Lecture notes in computer science · doi:10.1007/978-3-642-35999-6_22 · Cited by 236 · see citing works
The keyed-hash message authentication code (HMAC)
(2008) · doi:10.6028/nist.fips.198-1 · Cited by 216 · see citing works
Chaskey: An Efficient MAC Algorithm for 32-bit Microcontrollers
Mouha, N., Mennink, B., Herrewege, A. V., Watanabe, D., Bart Preneel, A., & Verbauwhede, I. M. R. (2014) · Lecture notes in computer science · doi:10.1007/978-3-319-13051-4_19 · Cited by 204 · see citing works
Self-citationTransitions: Recommendation for Transitioning the Use of Cryptographic Algorithms and Key Lengths
Barker, E. B., & Roginsky, A. L. (2015) · doi:10.6028/nist.sp.800-131ar1 · Cited by 191 · see citing works
Aumasson, J.-P., Henzen, L., Meier, W., & Naya‐Plasencia, M. (2012) · Journal of Cryptology · doi:10.1007/s00145-012-9125-6 · Cited by 174 · see citing works
Lightweight Cryptography - Cryptographic Engineering for a Pervasive World.
Poschmann, A. Y. (2009) · Cited by 168 · see citing works
Osvik, D. A., Bos, J. W., Stefan, D., et al. (2010) · Lecture notes in computer science · doi:10.1007/978-3-642-13858-4_5 · Cited by 146 · see citing works
Babbage, S., & Dodd, M. (2008) · Lecture Notes in Computer Science · doi:10.1007/978-3-540-68351-3_15 · Cited by 143 · see citing works
Mathew, S. K., Satpathy, S. K., Suresh, V., Anders, M. A., Kaul, H., Agarwal, A., Hsu, S. K., Chen, G., & Krishnamurthy, R. K. (2015) · IEEE Journal of Solid-State Circuits · doi:10.1109/jssc.2014.2384039 · Cited by 141 · see citing works
Recommendation for block cipher modes of operation :
Dworkin, M. J. (2015) · doi:10.6028/nist.sp.800-38b · Cited by 114 · see citing works
Recommendation for the triple data encryption algorithm (TDEA) block cipher
Barker, W. C., & Barker, E. B. (2012) · doi:10.6028/nist.sp.800-67r1 · Cited by 96 · see citing works
Recommendation for password-based key derivation :
Turan, M. S., Barker, E. B., Burr, W. E., & Chen, L. (2010) · doi:10.6028/nist.sp.800-132 · Cited by 85 · see citing works
Self-citationRecommendation for the Triple Data Encryption Algorithm (TDEA) Block Cipher | NIST
Barker, W. C., & Barker, E. B. (2012) · doi:10.1002/https://dx.doi.org/10.6028/nist.sp.800-67r2 · Cited by 80 · see citing works
A MAC Mode for Lightweight Block Ciphers
Luykx, A., Bart Preneel, A., Tischhauser, E., & Yasuda, K. (2016) · Lecture notes in computer science · doi:10.1007/978-3-662-52993-5_3 · Cited by 76 · see citing works
Recommendation for key derivation using pseudorandom functions (revised)
Chen, L. (2009) · doi:10.6028/nist.sp.800-108 · Cited by 76 · see citing works
Computing Small Discrete Logarithms Faster
Bernstein, D. J., & Lange, T. (2012) · Lecture notes in computer science · doi:10.1007/978-3-642-34931-7_19 · Cited by 62 · see citing works
Recommendation for Key Derivation Using Pseudorandom Functions, Revision 1 (Draft)Preprint
Chen, L. (2021) · doi:10.6028/nist.sp.800-108r1-draft · Cited by 60 · see citing works
A Lightweight 256-Bit Hash Function for Hardware and Low-End Devices: Lesamnta-LW
Hirose, S., Ideguchi, K., Kuwakado, H., et al. (2011) · Lecture notes in computer science · doi:10.1007/978-3-642-24209-0_10 · Cited by 53 · see citing works
Recommendation for existing application-specific key derivation functions
Dang, Q. H. (2011) · doi:10.6028/nist.sp.800-135r1 · Cited by 30 · see citing works
Recommendation for key derivation through extraction-then-expansion
Chen, L. (2011) · doi:10.6028/nist.sp.800-56c · Cited by 27 · see citing works
TuLP: A Family of Lightweight Message Authentication Codes for Body Sensor Networks
Gong, Z., Hartel, P., Nikova⋆, S., et al. (2014) · Journal of Computer Science and Technology · doi:10.1007/s11390-013-1411-8 · Cited by 22 · see citing works
NIST Cryptographic Standards and Guidelines Development Process
Regenscheid, A. (2016) · doi:10.6028/nist.ir.7977 · Cited by 16 · see citing works
A Study on RAM Requirements of Various SHA-3 Candidates on Low-cost 8-bit CPUs.
Ideguchi, K., Owada, T., & Yoshida, H. (2009) · Cited by 11 · see citing works
Flagged first, then by citations
Research works printed but not linked: 1
- [68]68. Needham, R.M., and Wheeler, D.J., Tea extensions, Technical Report, Computer Laboratory, University of Cambridge, October 1997, http://www.cix.co.uk/~klockstone/xtea.pdf
Cited by
Sorted by citations
Zero Trust Architecture (ZTA): A Comprehensive Survey
Syed, N. F., Shah, S. W., Shaghaghi, A., Anwar, A., Baig, Z., & Doss, R. (2022) · IEEE Access · doi:10.1109/access.2022.3174679 · Cited by 406 · see citing works
“We refer readers to [107] for further details on the standardization process and recent entries.”
BackgroundMethodLightweight cryptography methods
Buchanan, W. J., Li, S., & Asif, R. (2017) · Journal of Cyber Security Technology · doi:10.1080/23742917.2017.1384917 · Cited by 186 · see citing works
Privacy in Internet of Things: From Principles to Technologies
Li, C., & Palanisamy, B. (2019) · IEEE Internet of Things Journal · doi:10.1109/jiot.2018.2864168 · Cited by 130 · see citing works
Status report on the first round of the NIST lightweight cryptography standardization process
Turan, M. S., McKay, K. A., Çalık, Ç., Chang, D., & Bassham, L. (2019) · doi:10.6028/nist.ir.8268 · Cited by 63 · see citing works
Self-citationeZTrust: Network-Independent Zero-Trust Perimeterization for Microservices
Zaheer, Z., Chang, H., Mukherjee, S., & Van der Merwe, J. (2019) · Proceedings of the 2019 ACM Symposium on SDN Research · doi:10.1145/3314148.3314349 · Cited by 48 · see citing works
Identity in the Internet-of-Things (IoT): New Challenges and Opportunities
Lam, K.-Y., & Chi, C.-H. (2016) · Lecture Notes in Computer Science · doi:10.1007/978-3-319-50011-9_2 · Cited by 49 · see citing works
Hogan, M., & Piccarreta, B. (2018) · doi:10.6028/nist.ir.8200 · Cited by 33 · see citing works
Quantum Secure Lightweight Cryptography with Quantum Permutation Pad
Kuang, R., Lou, D., He, A., & Conlon, A. (2021) · Advances in Science, Technology and Engineering Systems Journal · doi:10.25046/aj060445 · Cited by 7 · see citing works
- Authors
- McKay, K. A., Bassham, L., Turan, M. S., & Mouha, N.
- Published
- 2017-03
- OpenAlex
- W2610964475
- Semantic Scholar
- 5eab4206d71da34ae6e00695553b137d2ac27267
- Cited by
- 353
- References
- 47
- Citations by year
- 2026: 17 · 2025: 21 · 2024: 52 · 2023: 33 · 2022: 54 · 2021: 45 · 2020: 37 · 2019: 37 · 2018: 38 · 2017: 18 · 2016: 1
- Type
- report
- Language
- en
- Open access
- gold
- doi.org
- Funders
- Information Technology Laboratory
- Topics
- Physical Sciences › Computer Science › Artificial Intelligence › Cryptographic Implementations and Security
- Physical Sciences › Computer Science › Information Systems › Cryptography and Residue Arithmetic
- Physical Sciences › Computer Science › Artificial Intelligence › Coding theory and cryptography
- Keywords
- lightweight cryptography, cryptography, information security, privacy, federal information systems, standards development
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
