Usuba: high-throughput and constant-time ciphers, by construction - Archive ouverte HAL Access content directly
Conference Papers Year :

Usuba: high-throughput and constant-time ciphers, by construction

(1, 2) , (1, 2)


Cryptographic primitives are subject to diverging imperatives. Functional correctness and auditability pushes for the use of a high-level programming language. Performance and the threat of timing attacks push for using no more abstract than an assembler to exploit (or avoid!) the micro-architectural features of a given machine. We believe that a suitable programming language can reconcile both views and actually improve on the state of the art of both. Usuba is an opinionated dataflow programming language in which block ciphers become so simple as to be “obviously correct” and whose types document and enforce valid parallelization strategies at the granularity of individual bits. Its optimizing compiler, Usubac, produces high-throughput, constant-time implementations performing on par with hand-tuned reference implementations. The cornerstone of our approach is a systematization and generalization of bitslicing, an implementation trick frequently used by cryptographers.
Not file

Dates and versions

hal-02176603 , version 1 (08-07-2019)



Darius Mercadier, Pierre-Evariste Dagand. Usuba: high-throughput and constant-time ciphers, by construction. PLDI 2019 - 40th ACM SIGPLAN Conference on Programming Language Design and Implementation, Jun 2019, Phoenix, United States. pp.157-173, ⟨10.1145/3314221.3314636⟩. ⟨hal-02176603⟩
93 View
0 Download



Gmail Facebook Twitter LinkedIn More