256 Bit standardized crypto for 650 GE - GOST revisited

Axel Poschmann*, San Ling, Huaxiong Wang

*Corresponding author for this work

Research output: Chapter in Book/Report/Conference proceedingConference proceeding contribution

29 Citations (Scopus)


The former Soviet encryption algorithm GOST 28147-89 has been standardized by the Russian standardization agency in 1989 and extensive security analysis has been done since. So far no weaknesses have been found and GOST is currently under discussion for ISO standardization. Contrary to the cryptographic properties, there has not been much interest in the implementation properties of GOST, though its Feistel structure and the operations of its round function are well-suited for hardware implementations. Our post-synthesis figures for an ASIC implementation of GOST with a key-length of 256 bits require only 800 GE, which makes this implementation well suitable for low-cost passive RFID-tags. As a further optimization, using one carefully selected S-box instead of 8 different ones -which is still fully compliant with the standard specifications!- the area requirement can be reduced to 651 GE.

Original languageEnglish
Title of host publicationCryptographic Hardware and Embedded Systems, CHES 2010 - 12th International Workshop, Proceedings
EditorsStefan Mangard, François-Xavier Standaert
Place of PublicationBerlin; Heidelberg
PublisherSpringer, Springer Nature
Number of pages15
ISBN (Print)3642150306, 9783642150302
Publication statusPublished - 2010
Event12th International Workshop on Cryptographic Hardware and Embedded Systems, CHES 2010 - Santa Barbara, CA, United States
Duration: 17 Aug 201020 Aug 2010

Publication series

NameLecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
Volume6225 LNCS
ISSN (Print)03029743
ISSN (Electronic)16113349


Other12th International Workshop on Cryptographic Hardware and Embedded Systems, CHES 2010
CountryUnited States
CitySanta Barbara, CA


  • ASIC
  • GOST
  • Lightweight cryptography

Fingerprint Dive into the research topics of '256 Bit standardized crypto for 650 GE - GOST revisited'. Together they form a unique fingerprint.

Cite this