Skip to content

Back to the catalog

eprint.iacr.orgpaper

Rotom: A Microcontroller-Oriented Tweakable Block Cipher Using Modular Multiplication

Rotom is a family of 128-bit tweakable block ciphers for 32-bit microcontrollers. Its fixed 16-bit S-box uses odd constant multiplication modulo 2^16 combined with linear maps, and its linear layer is recursive over four 32-bit words. Exhaustive S-box analysis gives explicit differential and linear bounds. On Cortex-M3 and M4, cycle counts are close to Speck and lower than MSX and fixsliced AES.

TL;DR Presents Rotom, a tweakable block cipher built on modular multiplication that runs near Speck speed on Cortex-M with proven differential and linear bounds.
Open original ↗

Technologies named here

  • Arm Cortex-M4
  • SPECK
  • ARM Cortex-M3
  • MSX
  • Rotom

Standards and laws named here

  • AES

Techniques named here

  • Linear cryptanalysis
  • Differential cryptanalysis

Concepts named here

  • Modular multiplication
  • Recursive linear layer
  • Software performance on Cortex-M
  • Tweakable block cipher

Related in other