[Cryptography] Formal definition of lightweight crypto

Dmitry Belyavsky beldmit at gmail.com
Fri Jan 1 12:04:57 EST 2016


Hello all,

Happy New Year!

Is there a formal definition of lightweight cryptographic algorithms?
The SPECK and SIMON algorithms by NSA (and many others) are declared to be
lightweight, but I did not find any definitions except

"These lightweight cryptographic primitives are designed to be efficient,
yet secure, when limited hardware resources are available. Consequently,
the main motive for current efforts of constructing lightweight
cryptographic primitives is to maintain a reasonable trade-off between
security, efficient hardware performance and low overall cost, measured by
a number of metrics. These metrics include, but are not limited to: area
(in terms of gate equivalences), throughput, power/energy consumption and
production cost."

Thank you!

-- 
SY, Dmitry Belyavsky
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.metzdowd.com/pipermail/cryptography/attachments/20160101/2e97476b/attachment.html>


More information about the cryptography mailing list