Title:

KATAN & KTANTAN - A Family of Small and Efficient Hardware-Oriented
Block Ciphers

Abstract:

In this talk we propose a new family of very efficient hardware oriented
block ciphers. The family contains six block ciphers divided into two
flavors. All block ciphers share the 80-bit key size and security level. The
first flavor, KATAN, is composed of three block ciphers, with 32, 48, or
64-bit block size. The second flavor, KTANTAN, contains the other three
ciphers with the same block sizes, and is more compact in hardware, as the
key is burnt into the device (and cannot be changed).

The smallest cipher of the entire family, KTANTAN32, can be implemented in
462 GE while achieving encryption speed of 12.5 KBit/sec (at 100 KHz).
KTANTAN48, which is the version we recommend for RFID tags uses 562 GE,
whereas KATAN64, the largest and most flexible candidate of the family, uses
1008 GE and has a throughput of 25.1 Kbit/sec (at 100 KHz).

This is a joint work with Christophe De Canniere and Miroslav Knezevic.