{"id":"https://openalex.org/W4405242237","doi":"https://doi.org/10.46586/tches.v2025.i1.656-683","title":"Efficient and Composable Masked AES S-Box Designs Using Optimized Inverters","display_name":"Efficient and Composable Masked AES S-Box Designs Using Optimized Inverters","publication_year":2024,"publication_date":"2024-12-09","ids":{"openalex":"https://openalex.org/W4405242237","doi":"https://doi.org/10.46586/tches.v2025.i1.656-683"},"language":"en","primary_location":{"id":"doi:10.46586/tches.v2025.i1.656-683","is_oa":true,"landing_page_url":"https://doi.org/10.46586/tches.v2025.i1.656-683","pdf_url":"https://tosc.iacr.org/index.php/TCHES/article/download/11942/11802","source":{"id":"https://openalex.org/S4210207404","display_name":"IACR Transactions on Cryptographic Hardware and Embedded Systems","issn_l":"2569-2925","issn":["2569-2925"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IACR Transactions on Cryptographic Hardware and Embedded Systems","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://tosc.iacr.org/index.php/TCHES/article/download/11942/11802","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5006935127","display_name":"Vedad Had\u017ei\u0107","orcid":"https://orcid.org/0000-0001-7974-3381"},"institutions":[{"id":"https://openalex.org/I4092182","display_name":"Graz University of Technology","ror":"https://ror.org/00d7xrm67","country_code":"AT","type":"education","lineage":["https://openalex.org/I4092182"]}],"countries":["AT"],"is_corresponding":false,"raw_author_name":"Vedad Had\u017eic","raw_affiliation_strings":["Graz University of Technology, Graz, Austria"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Graz University of Technology, Graz, Austria","institution_ids":["https://openalex.org/I4092182"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5053520475","display_name":"Roderick Bloem","orcid":"https://orcid.org/0000-0002-1411-5744"},"institutions":[{"id":"https://openalex.org/I4092182","display_name":"Graz University of Technology","ror":"https://ror.org/00d7xrm67","country_code":"AT","type":"education","lineage":["https://openalex.org/I4092182"]}],"countries":["AT"],"is_corresponding":false,"raw_author_name":"Roderick Bloem","raw_affiliation_strings":["Graz University of Technology, Graz, Austria"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Graz University of Technology, Graz, Austria","institution_ids":["https://openalex.org/I4092182"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I4092182"],"apc_list":null,"apc_paid":null,"fwci":0.7308,"has_fulltext":true,"cited_by_count":3,"citation_normalized_percentile":{"value":0.74870229,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":94,"max":97},"biblio":{"volume":"2025","issue":"1","first_page":"656","last_page":"683"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T13182","display_name":"Quantum-Dot Cellular Automata","score":0.9876999855041504,"subfield":{"id":"https://openalex.org/subfields/1703","display_name":"Computational Theory and Mathematics"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T13182","display_name":"Quantum-Dot Cellular Automata","score":0.9876999855041504,"subfield":{"id":"https://openalex.org/subfields/1703","display_name":"Computational Theory and Mathematics"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10363","display_name":"Low-power high-performance VLSI design","score":0.9745000004768372,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10558","display_name":"Advancements in Semiconductor Devices and Circuit Design","score":0.9621999859809875,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/s-box","display_name":"S-box","score":0.5624074339866638},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.5282340049743652},{"id":"https://openalex.org/keywords/embedded-system","display_name":"Embedded system","score":0.4986844062805176},{"id":"https://openalex.org/keywords/computer-hardware","display_name":"Computer hardware","score":0.3265966773033142},{"id":"https://openalex.org/keywords/cryptography","display_name":"Cryptography","score":0.18123233318328857},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.12923520803451538},{"id":"https://openalex.org/keywords/block-cipher","display_name":"Block cipher","score":0.057530611753463745}],"concepts":[{"id":"https://openalex.org/C45737032","wikidata":"https://www.wikidata.org/wiki/Q748364","display_name":"S-box","level":4,"score":0.5624074339866638},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5282340049743652},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.4986844062805176},{"id":"https://openalex.org/C9390403","wikidata":"https://www.wikidata.org/wiki/Q3966","display_name":"Computer hardware","level":1,"score":0.3265966773033142},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.18123233318328857},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.12923520803451538},{"id":"https://openalex.org/C106544461","wikidata":"https://www.wikidata.org/wiki/Q543151","display_name":"Block cipher","level":3,"score":0.057530611753463745}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.46586/tches.v2025.i1.656-683","is_oa":true,"landing_page_url":"https://doi.org/10.46586/tches.v2025.i1.656-683","pdf_url":"https://tosc.iacr.org/index.php/TCHES/article/download/11942/11802","source":{"id":"https://openalex.org/S4210207404","display_name":"IACR Transactions on Cryptographic Hardware and Embedded Systems","issn_l":"2569-2925","issn":["2569-2925"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IACR Transactions on Cryptographic Hardware and Embedded Systems","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:7f9ec9d69797431d98d0d83fd5666414","is_oa":false,"landing_page_url":"https://doaj.org/article/7f9ec9d69797431d98d0d83fd5666414","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Transactions on Cryptographic Hardware and Embedded Systems, Vol 2025, Iss 1 (2024)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.46586/tches.v2025.i1.656-683","is_oa":true,"landing_page_url":"https://doi.org/10.46586/tches.v2025.i1.656-683","pdf_url":"https://tosc.iacr.org/index.php/TCHES/article/download/11942/11802","source":{"id":"https://openalex.org/S4210207404","display_name":"IACR Transactions on Cryptographic Hardware and Embedded Systems","issn_l":"2569-2925","issn":["2569-2925"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IACR Transactions on Cryptographic Hardware and Embedded Systems","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320323031","display_name":"\u00d6sterreichische Forschungsf\u00f6rderungsgesellschaft","ror":"https://ror.org/028jc0449"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4405242237.pdf","grobid_xml":"https://content.openalex.org/works/W4405242237.grobid-xml"},"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2090585787","https://openalex.org/W3011666440","https://openalex.org/W3012009330","https://openalex.org/W2390279801","https://openalex.org/W4391913857","https://openalex.org/W2358668433","https://openalex.org/W4396701345"],"abstract_inverted_index":{"Hardware":[0],"implementations":[1,110],"of":[2,50,101,126,152,173,187,230,257,276],"cryptographic":[3,59],"algorithms":[4],"are":[5,39],"susceptible":[6],"to":[7,13,47,73,178],"power":[8,63],"analysis":[9,64],"attacks,":[10],"allowing":[11],"attackers":[12],"break":[14],"the":[15,37,54,94,102,169,188,231,252,267,272],"otherwise":[16],"strong":[17],"security":[18,256],"guarantees.":[19],"A":[20],"theoretically":[21],"sound":[22],"countermeasure":[23],"against":[24,62],"such":[25],"attacks":[26,65],"is":[27,105],"masking,":[28],"where":[29],"all":[30,49,203,258],"key-":[31],"and":[32,69,108,129,145,175,207,215,249,280],"data-dependent":[33],"intermediate":[34],"values":[35],"in":[36,119,131,155,202,274],"computation":[38],"split":[40],"into":[41,123],"so-called":[42],"shares,":[43],"requiring":[44],"an":[45,226],"attacker":[46],"learn":[48],"them":[51],"before":[52],"recovering":[53],"secret":[55],"key.":[56],"Masking":[57],"a":[58,120,124,132,141,164,180,195,208],"hardware":[60],"design":[61,115,139],"incurs":[66],"large":[67],"area":[68,281],"latency":[70],"overheads":[71,84],"due":[72],"their":[74],"nonlinear":[75,90],"components,":[76],"especially":[77],"when":[78],"implemented":[79],"using":[80],"composable":[81,157,184,254],"masking":[82,100,158],"schemes.These":[83],"disproportionately":[85],"affect":[86],"ciphers":[87],"with":[88],"highly":[89],"monolithic":[91],"S-Boxes":[92],"like":[93],"Advanced":[95],"Encryption":[96],"Standard":[97],"(AES).":[98],"The":[99],"AES":[103,189,260],"S-Box":[104,238,261],"well":[106],"studied,":[107],"most":[109],"use":[111,176,279],"Canright\u2019s":[112,137,242],"F28":[113,165,244],"inverter":[114,138,166,233],"that":[116,167,200,218,266],"decomposes":[117],"operations":[118],"larger":[121],"field":[122],"combination":[125],"multiplications,":[127],"additions":[128],"inversions":[130],"smaller":[133],"field.":[134],"While":[135],"remarkable,":[136],"has":[140],"sub-optimal":[142],"multiplicative":[143,171],"depth,":[144],"can":[146],"thus":[147],"not":[148],"take":[149],"full":[150],"advantage":[151],"recent":[153],"developments":[154],"low-latency":[156,197],"schemes.In":[159],"this":[160],"paper,":[161],"we":[162,192,223],"present":[163,193],"achieves":[168],"optimal":[170],"depth":[172],"three,":[174],"it":[177],"construct":[179],"more":[181,235],"efficient":[182,236],"trivially":[183,253],"masked":[185,237,259],"implementation":[186,229],"S-Box.":[190],"Moreover,":[191],"HPC3.1,":[194],"better":[196],"multiplication":[198],"gadget":[199],"works":[201],"finite":[204],"fields":[205],"Fpn,":[206],"randomness":[209,278],"reuse":[210],"strategy":[211],"for":[212,234],"both":[213],"HPC1":[214],"HPC3.1":[216],"gadgets":[217],"preserves":[219],"side-channel":[220,255],"security.":[221],"Orthogonally,":[222],"also":[224],"propose":[225],"improved":[227],"bit-level":[228],"F24":[232],"designs":[239,268],"based":[240],"on":[241],"original":[243],"inverter.We":[245],"develop,":[246],"functionally":[247],"test,":[248],"formally":[250],"verify":[251],"designs.":[262],"Our":[263],"evaluation":[264],"shows":[265],"outperform":[269],"or":[270],"match":[271],"state-of-the-art":[273],"terms":[275],"latency,":[277],"cost.":[282]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":2}],"updated_date":"2026-08-24T07:32:12.397491","created_date":"2025-10-10T00:00:00"}