A More Compact AES, and More

ePrint Report: A More Compact AES, and More

Dag Arne Osvik, David Canright

We reduce the number of bit operations required to implement AES to a new minimum, and also compute improvements to elements of some other ciphers. Exploring the algebra of AES allows choices of basis and streamlining of the nonlinear parts. We also compute a more efficient implementation of the linear part of each round. Similar computational optimizations apply to other cryptographic matrices and S-boxes. This …

aes algebra ciphers compute eprint report operations parts report