The circuit files with the straight-line programs (SLPs) are stored in our GitHub page, here:
https://github.com/usnistgov/Circuits/tree/master/data/slp
AES S-Boxes | Links | #ANDs | #XOR + #XNOR | #Gates | Depth | AND-Depth |
S-Box 1 | SLP, Graph | 32 | 83 | 115 | 28 | 6 |
S-Box 2 | SLP | 32 | 81 | 113 | 27 | 6 |
S-Box 3 | SLP, Graph | 34 | 94 | 128 | 16 | 4 |
S-Box inverse 1 | SLP | 34 | 87 | 121 | 21 | 4 |
S-Box inverse 2 | SLP, Graph | 34 | 93 | 127 | 16 | 4 |
AES Cipher | Links | #ANDs | #XNOR | #XOR | #Gates | Depth | AND-Depth |
AES-128(k,m) | SLP | 6400 | 844 | 21 356 | 28 600 | 326 | 60 |
AES-128(0,m) | SLP | 5120 | 1620 | 14 652 | 21 392 | 325 | 60 |
The AES circuit above is constructed using: (i) the S-Box implementation “forward 2” (doi:10.1007/s00145-012-9124-7 further improved in 2013 by 2 XORs); and (ii) the MixColumn circuit by Maximov in 2019 (ia.cr/2019/833).
Circuits for multiplying two n-terms (degree n-1) polynomials.
#Terms (n) | Links | #ANDs | #XORs | #Gates | Depth | AND-Depth |
11 | SLP, Graph | 78 | 108 | 186 | 7 | 1 |
12 | SLP, Graph | 81 | 126 | 207 | 7 | 1 |
15 | SLP | 117 | 195 | 312 | 9 | 1 |
16 | SLP, Graph | 144 | 205 | 349 | 8 | 1 |
18 | SLP, Graph | 195 | 259 | 454 | 8 | 1 |
19 | SLP, Graph | 214 | 284 | 498 | 8 | 1 |
20 | SLP, Graph | 225 | 302 | 527 | 8 | 1 |
Bn is the set of all boolean functions on n-variables.
MaxMC is the maximum of the MCs of all functions in a class.
Bn | Links | MaxMC | #Classes |
B4 | SLPs of All predicates | 3 | 8 |
B5 | (see B6) | 4 | 48 |
B6 | SLPs of representatives of all classes, Paper (ia.cr/2018/002) | 6 | 150367 |