Three for the price of one – Xiphera adds lightweight cryptography to its stream cipher portfolio

The new Ascon lightweight IP core offers a smaller alternative for devices with limited resources.
Xiphera's symmetric encryption algorithms provide uncompromised data encryption.

Xiphera releases XIP2201B, an IP core which supports the Ascon lightweight cryptographic suite. This IP core is especially useful for small devices used in Industrial IoT.

In August 2018, the US based National Institute of Standards and Technology (NIST) launched a competition to standardise a lightweight cryptographic algorithm. The purpose of the competition was to standardise an algorithm with minimal resources (i.e. lightweight) that is able to perform multiple cryptographic primitives. This type of algorithm is especially useful for small devices that have constraints on resources, e.g. IoT devices. Out of 56 candidates in the competition, Ascon came out victorious.

Ascon is a lightweight, sponge-based, algorithm that can perform three cryptographic primitives: authenticated encryption with associated data (AEAD), hashing, and extendable output function (XOF). AEAD is a cryptographic scheme where one can encrypt as well as authenticate data, preserving privacy and integrity of the sent data. Associated data refers to data that is not encrypted but is also authenticated. Hashing is a one-way input function mapping messages to fixed length hashes such that a hash cannot be inverted back to the message. XOFs are like hashes but they allow for variable length outputs.

There exist algorithms that provide the primitives: AES-GCM is the most common AEAD algorithm, SHA-2 and SHA-3 are widely used for hashing, and SHAKE is used for XOFs. Instead of using multiple different structures to compute these functions, Ascon uses a single permutation-based operation to compute all three. For these primitives, Ascon also provides multiple variants. XIP2201B supports all variants of Ascon (128, 128a, 80pq, Hash, Hasha, XOF, XOFa) and vows to update the algorithms as newer versions are standardised.

Internal high-level block diagram of balanced ASCON IP core (XIP2201B).
Internal high-level block diagram of balanced ASCON IP core (XIP2201B).

The intention with Ascon is not to replace the already widely used AES-GCM and SHA-3 algorithms, but rather to offer a smaller alternative for devices with limited resources. “The efficiency of Ascon, especially for small inputs, makes Ascon a very good choice for IoT devices.”, says Perttu Saarela, a cryptographic engineer at Xiphera.

For more information, visit the product page for XIP2201B. You can also download the full product brief here.

Read more about and see more of the solutions of this product family from our Symmetric Encryption page. Don’t hesitate to contact us at sales(at)xiphera.com.

Back to newsroom
Read more
Xiphera’s nQrux™ family of Hardware Trust Engines offers ready-to-implement security modules for various security architectures.
  • Product news & updates

Xiphera Launches nQrux™ Family of Hardware Trust Engines for Hardware-Isolated Cryptographic Services and Computing Environments

The new nQrux™ portfolio offers highly optimised and customisable security solutions with cryptographic operations implemented purely in hardware.
Xiphera’s cryptographic Security Protocol portfolio, including widely used MACsec and TLS 1.3 IP protocols, secures point-to-point communication as well as server-client connections over the Internet.
  • Product news & updates

Scalable Extreme-speed IPsec Added to Xiphera’s Security Protocols Portfolio

The IPsec IP core complements Xiphera’s Security Protocols offering, bringing proven security for the critical layers 2-4 of the OSI model.
  • Product news & updates

What Is the OSI Model, and How Can We Protect Its Critical Layers?

The OSI model is the basis for most of the modern digital communications. Let’s dive into the seven layers of the OSI model and answers the billion-dollar question: how to protect the transmitted data throughout the OSI model?