F0E5E6D0F7F7BDE4DB2C4F074D02062www.ddd138.com

AN12304LeakageResilientPrimitive(LRP)SpecificationRev.
1.
1—13March2019Applicationnote466011COMPANYPUBLICDocumentinformationInformationContentKeywordsNXP,LeakageResilientPrimitive,LRP,AEScryptography,enhancesside-channelandfaultresistanceAbstractThisapplicationnoteaddressestheimplementationofanalternativeAES-basedprotocolforauthenticationandsecuremessagingusingaLeakageResilientPrimitive,LRP.
TheLRPworksasawrapperaroundtheAEScryptographyandenhancesside-channelandfaultresistance.
NXPSemiconductorsAN12304LeakageResilientPrimitive(LRP)SpecificationAN12304Allinformationprovidedinthisdocumentissubjecttolegaldisclaimers.
NXPB.
V.
2019.
Allrightsreserved.
ApplicationnoteRev.
1.
1—13March2019COMPANYPUBLIC4660112/41RevisionhistoryRevisionhistoryRevDateDescription1.
120190313RemovethespecificproductnamesinKeywords1.
020190131InitialversionNXPSemiconductorsAN12304LeakageResilientPrimitive(LRP)SpecificationAN12304Allinformationprovidedinthisdocumentissubjecttolegaldisclaimers.
NXPB.
V.
2019.
Allrightsreserved.
ApplicationnoteRev.
1.
1—13March2019COMPANYPUBLIC4660113/411IntroductionThisdocumentdescribesNXP'sLeakageResilientPrimitive(LRP)anditsuseforauthentication,encryptionandCMACoperation.
TheLRPprimitiveservesasadrop-inreplacementforAESandonlyusesstandardcryptographicconstructionsbasedonAES,withoutanyproprietarycryptography.
Thus,inthiscontext,LRPcanbeseenasanalternativeforAESwhichisitselfbasedonAESbutcomeswithbetterpropertiesw.
r.
t.
implementationsecurity.
1.
1CryptographicsecurityThesecurityofLRPisbasedonthesecurityoftheGoldreich-Goldwasser-Micali(GGM)constructionofapseudo-randomfunction[2]fromapseudo-randomgenerator(PRG).
Theproofofitssecuritycanbefoundinmanycryptographytextbooks(e.
g.
[3]).
InthecaseofLRP,theusedpseudo-randomgeneratorPRGisAESincounter(CTR)mode[1]whichitselfisaNISTstandard.
Forencryption,LRPisusedinaslightvariationoftheCTRmode.
Thatis,insteadofx-oringthekeystreamtothemessage,itisusedaskeysinelectroniccodebook(ECB)mode.
ForMACing,theclassicalCMACconstructionisadapted[1]andsimplyreplacedtheblockcipherbyLRP.
1.
2OrganizationTheremainderofthisdocumentisorganizedintwoparts:Section2specifiesthealgorithmsandhowtousethem.
Section3providestestvectors.
NXPSemiconductorsAN12304LeakageResilientPrimitive(LRP)SpecificationAN12304Allinformationprovidedinthisdocumentissubjecttolegaldisclaimers.
NXPB.
V.
2019.
Allrightsreserved.
ApplicationnoteRev.
1.
1—13March2019COMPANYPUBLIC4660114/412AlgorithmsThissectiondescribesthealgorithmswhichhavetobeusedtoimplementLRPandthecryptographicservicesusingLRP.
2.
1Pre-computationsThealgorithmsinthissectionusuallyonlyneedtobeexecutedonceperkey,independentofthedatatoprocess.
Basically,theyareusedtoexpandthe128-bitkeymaterialto16secretplaintextsandatleast1updatedkey,eachofthembeingvectorsof128-bitlength.
2.
1.
1PlaintextandkeygenerationThebasicprincipleofthesecretplaintextandupdatedkeygenerationisdepictedinFigure1.
Thegrayboxescontainingtheletter'E'symbolizeAESblockcipherinvocationsinencryptiondirection.
Furthermore,thetriangleinputisthekeyinputandtheotheronetheplaintextinput.
Finally,wheneverabytevalueinhexadecimalnotationisfedinasaplaintextthishastobeunderstoodasfeedingina128-bitvectorcontaining16timesthisbyte.
Forinstance0x55refersto0x55555555555555555555555555555555or{0x55}16inshort.
ItcanbeseenthatthefirsttwoencryptionsserveasalengthdoublingPRGwheretheupperoutputisfurtherusedasaseedinthegenerationofthe2msecretplaintexts.
Theloweroutputisusedasaseedforthegenerationofthequpdatedkeys.
Typically,theupperandthelowerbranches(secretplaintextandupdatedkeygeneration)areinvokedasseparatealgorithms.
ThesearespecifiedinAlgorithms1and2.
Theparametermwithinthesealgorithmsis4.
Ek(p)denotestheencryptionofpunderkeyk.
Theparameterqinthecontextofsecuremessagingis2inordertogenerateoneMACingkeyk0andoneencryptionkeyk1.
Note,thatinthecontextoftheNTAG42xDNAandNTAG42xDNATT,k0isusedasencryptionkeyincasePICCDataencryptionisapplied.
E0x55E0xaaE0xaap0k0E0xaap2m-1E0xaakq-1E0x55aaa-032517kE0x55iterations2-2m-2iterations2-q-2E0xaaFigure1.
GenerationofsecretplaintextsandupdatedkeysNXPSemiconductorsAN12304LeakageResilientPrimitive(LRP)SpecificationAN12304Allinformationprovidedinthisdocumentissubjecttolegaldisclaimers.
NXPB.
V.
2019.
Allrightsreserved.
ApplicationnoteRev.
1.
1—13March2019COMPANYPUBLIC4660115/412.
1.
1.
1Algorithm12.
1.
1.
2Algorithm22.
2LRPfunctionevaluationLRPitselfisdefinedbyAlgorithm3whichtakestheprecomputedvaluesfromAlgorithms1and2asinput.
Inparticular,k'referstooneofthekeysfrom{k0,.
.
.
,kq1},wherek0isusedforintegrityprotection(MACcalculation)andforPICCDataencryptioninNTAG424DNAandk1isusedforencryptionofdatainFullCommunicationmode.
Asabove,m=4,thereforelen(x,m)returnsthenumberofnibblesasingenerallen(x,m)isdefinedas.
Thepurposeofthefinalflagistoallowforcaching.
Especially,forencryptionwherexrepresentsacounterandthusmostofthemostsignificantbits(MSBits)willstaythesamefromoneinvocationofAlgorithm3toanother,cachingintermediatevaluescantremendouslyincreasetheperformance.
NXPSemiconductorsAN12304LeakageResilientPrimitive(LRP)SpecificationAN12304Allinformationprovidedinthisdocumentissubjecttolegaldisclaimers.
NXPB.
V.
2019.
Allrightsreserved.
ApplicationnoteRev.
1.
1—13March2019COMPANYPUBLIC4660116/412.
2.
1Algorithm32.
3LRICBEncryptionanddecryptionareimplementedasoperatingLRPinCTRmodeandthenusingtheresultingkeystreamasakeyforAESinECBmode.
WerefertothismodeasLeakageResilientIndexedCodeBook(LRICB)mode.
Foranw-blockplaintextpt,thiscanbewrittenaswhereptiandctidenotetheithplaintextandciphertextblock,risthecountervalue,LRPkisLRPusingkeyk,ELRPkandDLRPkdenotetheencryptionanddecryptionusingtheoutputoftheLRPevaluationaskey.
Themessageneedstobeeitheramultipleof16bytesorpaddedusingPaddingMethod2ofISO/IEC9797-1[4],i.
e.
byaddingalways0x80followed,ifrequired,byzerobytesuntilastringwithalengthofamultipleof16bytesisobtained.
Notethatiftheplaindataisamultipleof16bytesalready,anadditionalpaddingblockisadded.
Theonlyexceptionisduringtheauthenticationitself(AuthenticateLRPFirstandAuthenticateLRPNonFirst),wherenopaddingisappliedatall.
Runningencryptionincountermodealsohastheadvantagethatforaw-blockoutputc0,.
.
.
,cw1,r0,.
.
.
,rw1haveuptowl=len(128,m)-len(w,m)equalmostsignificantchunks.
ThismeansthattheloopinAlgorithm3caninthefirststeponlybeevaluateduntildepthwlwhichtakeswlencryptions.
Thenforeveryri,theremainingevaluationeffortislen(w,m)+2(2forthefinaltransformationandtheECBstep).
Therefore,theeffortforencryptingwblockscanbestatedaswl+(len(w,m)+2)*wencryptions.
Toallowsuchoptimizations,thecounterisassumedtobeinbig-endianasitisprocessedfromlefttorightbyevalLRP(seeAlgorithm3).
However,theoptimizationsthemselvesarenotincludedinthedepictedalgorithm.
NXPSemiconductorsAN12304LeakageResilientPrimitive(LRP)SpecificationAN12304Allinformationprovidedinthisdocumentissubjecttolegaldisclaimers.
NXPB.
V.
2019.
Allrightsreserved.
ApplicationnoteRev.
1.
1—13March2019COMPANYPUBLIC4660117/412.
3.
1Algorithm4NXPSemiconductorsAN12304LeakageResilientPrimitive(LRP)SpecificationAN12304Allinformationprovidedinthisdocumentissubjecttolegaldisclaimers.
NXPB.
V.
2019.
Allrightsreserved.
ApplicationnoteRev.
1.
1—13March2019COMPANYPUBLIC4660118/412.
3.
2Algorithm52.
4LRP-CMACLRP-CMACisobtainedbyjustreplacingAESinCMACbyLRP.
TheCMACkeysK1andK2arethereforegeneratedasfollows:NXPSemiconductorsAN12304LeakageResilientPrimitive(LRP)SpecificationAN12304Allinformationprovidedinthisdocumentissubjecttolegaldisclaimers.
NXPB.
V.
2019.
Allrightsreserved.
ApplicationnoteRev.
1.
1—13March2019COMPANYPUBLIC4660119/412.
4.
1Algorithm6NXPSemiconductorsAN12304LeakageResilientPrimitive(LRP)SpecificationAN12304Allinformationprovidedinthisdocumentissubjecttolegaldisclaimers.
NXPB.
V.
2019.
Allrightsreserved.
ApplicationnoteRev.
1.
1—13March2019COMPANYPUBLIC46601110/413TestVectors3.
1LRPEvalindetail1.
TestVectorsa.
LRPEvalindetailHere,BasekeyreferstokinAlgorithms1and2.
P[i]mapstopiinAlgorithm1andUK[i]mapstokiinAlgorithm2.
GeneratingSecretPlaintextsandUpdatedKeysBasekey:56-78-26-B8-DA-8E-76-84-32-A9-54-8D-BE-4A-A3-A0AESblockkey:56-78-26-B8-DA-8E-76-84-32-A9-54-8D-BE-4A-A3-A0AESblockplaintext:55-55-55-55-55-55-55-55-55-55-55-55-55-55-55-55AESblockciphertext:3A-92-AA-06-40-F2-6A-E9-2F-81-99-36-52-F0-05-18AESblockkey:56-78-26-B8-DA-8E-76-84-32-A9-54-8D-BE-4A-A3-A0AESblockplaintext:AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AAAESblockciphertext:22-DA-7A-8A-2F-4A-72-1D-43-EC-1C-97-02-FE-77-BEGeneratingSecretPlaintextsPlaintextbasekey:3A-92-AA-06-40-F2-6A-E9-2F-81-99-36-52-F0-05-18AESblockkey:3A-92-AA-06-40-F2-6A-E9-2F-81-99-36-52-F0-05-18AESblockplaintext:AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AAAESblockciphertext:AC-20-D3-9F-53-41-FE-98-DF-CA-21-DA-86-BA-79-14P[0]:AC-20-D3-9F-53-41-FE-98-DF-CA-21-DA-86-BA-79-14AESblockkey:3A-92-AA-06-40-F2-6A-E9-2F-81-99-36-52-F0-05-18AESblockplaintext:55-55-55-55-55-55-55-55-55-55-55-55-55-55-55-55AESblockciphertext:10-79-E9-6B-0E-24-61-C2-DE-AB-00-30-59-56-54-9AKeyfornextsecretplaintextgeneration:10-79-E9-6B-0E-24-61-C2-DE-AB-00-30-59-56-54-9AAESblockkey:10-79-E9-6B-0E-24-61-C2-DE-AB-00-30-59-56-54-9AAESblockplaintext:AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AAAESblockciphertext:90-7D-A0-3D-67-24-49-16-69-15-E4-56-3E-08-9D-6DP[1]:90-7D-A0-3D-67-24-49-16-69-15-E4-56-3E-08-9D-6DAESblockkey:10-79-E9-6B-0E-24-61-C2-DE-AB-00-30-59-56-54-9AAESblockplaintext:55-55-55-55-55-55-55-55-55-55-55-55-55-55-55-55AESblockciphertext:F9-A0-89-7A-D9-D3-76-BA-F7-88-6C-62-C8-E8-97-15Keyfornextsecretplaintextgeneration:F9-A0-89-7A-D9-D3-76-BA-F7-88-6C-62-C8-E8-97-15AESblockkey:F9-A0-89-7A-D9-D3-76-BA-F7-88-6C-62-C8-E8-97-15AESblockplaintext:AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AAAESblockciphertext:92-FA-A8-B8-78-CC-D5-0C-63-13-DB-59-09-9D-CC-E8P[2]:92-FA-A8-B8-78-CC-D5-0C-63-13-DB-59-09-9D-CC-E8AESblockkey:F9-A0-89-7A-D9-D3-76-BA-F7-88-6C-62-C8-E8-97-15AESblockplaintext:55-55-55-55-55-55-55-55-55-55-55-55-55-55-55-55AESblockciphertext:84-B8-14-14-BE-98-AD-7F-12-EE-F0-DD-1B-17-DF-FFKeyfornextsecretplaintextgeneration:84-B8-14-14-BE-98-AD-7F-12-EE-F0-DD-1B-17-DF-FFAESblockkey:84-B8-14-14-BE-98-AD-7F-12-EE-F0-DD-1B-17-DF-FFAESblockplaintext:AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AAAESblockciphertext:37-2F-A1-3D-D4-3E-FD-41-98-59-DC-BC-FC-EF-FB-F8P[3]:37-2F-A1-3D-D4-3E-FD-41-98-59-DC-BC-FC-EF-FB-F8AESblockkey:84-B8-14-14-BE-98-AD-7F-12-EE-F0-DD-1B-17-DF-FFAESblockplaintext:55-55-55-55-55-55-55-55-55-55-55-55-55-55-55-55AESblockciphertext:02-0C-87-DA-40-8C-3C-8D-E2-C1-58-86-2B-09-B6-3DKeyfornextsecretplaintextgeneration:02-0C-87-DA-40-8C-3C-8D-E2-C1-58-86-2B-09-B6-3DAESblockkey:02-0C-87-DA-40-8C-3C-8D-E2-C1-58-86-2B-09-B6-3DAESblockplaintext:AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AAAESblockciphertext:5F-E2-E4-68-95-8B-6B-05-C8-A0-34-F3-38-23-CF-1BP[4]:5F-E2-E4-68-95-8B-6B-05-C8-A0-34-F3-38-23-CF-1BNXPSemiconductorsAN12304LeakageResilientPrimitive(LRP)SpecificationAN12304Allinformationprovidedinthisdocumentissubjecttolegaldisclaimers.
NXPB.
V.
2019.
Allrightsreserved.
ApplicationnoteRev.
1.
1—13March2019COMPANYPUBLIC46601111/41AESblockkey:02-0C-87-DA-40-8C-3C-8D-E2-C1-58-86-2B-09-B6-3DAESblockplaintext:55-55-55-55-55-55-55-55-55-55-55-55-55-55-55-55AESblockciphertext:95-38-28-9A-9A-AC-5B-2D-B4-BB-76-F8-0F-B8-E8-5BKeyfornextsecretplaintextgeneration:95-38-28-9A-9A-AC-5B-2D-B4-BB-76-F8-0F-B8-E8-5BAESblockkey:95-38-28-9A-9A-AC-5B-2D-B4-BB-76-F8-0F-B8-E8-5BAESblockplaintext:AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AAAESblockciphertext:AB-75-E2-FA-6D-CC-BA-A0-4E-85-D0-7F-B9-4E-ED-28P[5]:AB-75-E2-FA-6D-CC-BA-A0-4E-85-D0-7F-B9-4E-ED-28AESblockkey:95-38-28-9A-9A-AC-5B-2D-B4-BB-76-F8-0F-B8-E8-5BAESblockplaintext:55-55-55-55-55-55-55-55-55-55-55-55-55-55-55-55AESblockciphertext:A9-ED-2B-3A-93-C5-07-D1-3C-28-C5-58-2F-C3-5E-12Keyfornextsecretplaintextgeneration:A9-ED-2B-3A-93-C5-07-D1-3C-28-C5-58-2F-C3-5E-12AESblockkey:A9-ED-2B-3A-93-C5-07-D1-3C-28-C5-58-2F-C3-5E-12AESblockplaintext:AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AAAESblockciphertext:AC-05-BC-DA-C4-4B-14-BF-FD-F8-90-74-98-69-53-89P[6]:AC-05-BC-DA-C4-4B-14-BF-FD-F8-90-74-98-69-53-89AESblockkey:A9-ED-2B-3A-93-C5-07-D1-3C-28-C5-58-2F-C3-5E-12AESblockplaintext:55-55-55-55-55-55-55-55-55-55-55-55-55-55-55-55AESblockciphertext:3E-52-A9-EC-91-92-2C-9A-0B-53-E7-9A-44-BE-88-2EKeyfornextsecretplaintextgeneration:3E-52-A9-EC-91-92-2C-9A-0B-53-E7-9A-44-BE-88-2EAESblockkey:3E-52-A9-EC-91-92-2C-9A-0B-53-E7-9A-44-BE-88-2EAESblockplaintext:AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AAAESblockciphertext:0A-F9-75-ED-75-29-42-D7-56-A8-A9-7C-78-C0-9C-D8P[7]:0A-F9-75-ED-75-29-42-D7-56-A8-A9-7C-78-C0-9C-D8AESblockkey:3E-52-A9-EC-91-92-2C-9A-0B-53-E7-9A-44-BE-88-2EAESblockplaintext:55-55-55-55-55-55-55-55-55-55-55-55-55-55-55-55AESblockciphertext:AF-DA-9A-87-2B-A6-A7-59-CC-9E-AC-6E-A3-24-D9-E4Keyfornextsecretplaintextgeneration:AF-DA-9A-87-2B-A6-A7-59-CC-9E-AC-6E-A3-24-D9-E4AESblockkey:AF-DA-9A-87-2B-A6-A7-59-CC-9E-AC-6E-A3-24-D9-E4AESblockplaintext:AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AAAESblockciphertext:4F-58-AF-B5-7C-AD-5F-E1-6C-03-3F-9D-F5-B5-B3-FEP[8]:4F-58-AF-B5-7C-AD-5F-E1-6C-03-3F-9D-F5-B5-B3-FEAESblockkey:AF-DA-9A-87-2B-A6-A7-59-CC-9E-AC-6E-A3-24-D9-E4AESblockplaintext:55-55-55-55-55-55-55-55-55-55-55-55-55-55-55-55AESblockciphertext:78-FB-A2-45-D5-AA-8D-0C-F7-3D-EA-EF-B2-5F-19-87Keyfornextsecretplaintextgeneration:78-FB-A2-45-D5-AA-8D-0C-F7-3D-EA-EF-B2-5F-19-87AESblockkey:78-FB-A2-45-D5-AA-8D-0C-F7-3D-EA-EF-B2-5F-19-87AESblockplaintext:AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AAAESblockciphertext:56-98-D7-B5-F5-95-66-14-D5-7B-5A-18-B9-B8-81-0EP[9]:56-98-D7-B5-F5-95-66-14-D5-7B-5A-18-B9-B8-81-0EAESblockkey:78-FB-A2-45-D5-AA-8D-0C-F7-3D-EA-EF-B2-5F-19-87AESblockplaintext:55-55-55-55-55-55-55-55-55-55-55-55-55-55-55-55AESblockciphertext:0E-E5-92-0E-07-49-07-BB-AE-D5-E5-20-46-CF-09-82Keyfornextsecretplaintextgeneration:0E-E5-92-0E-07-49-07-BB-AE-D5-E5-20-46-CF-09-82AESblockkey:0E-E5-92-0E-07-49-07-BB-AE-D5-E5-20-46-CF-09-82AESblockplaintext:AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AAAESblockciphertext:5A-C8-CF-BA-77-F7-C6-A6-13-48-AF-B9-2B-11-95-CAP[10]:5A-C8-CF-BA-77-F7-C6-A6-13-48-AF-B9-2B-11-95-CAAESblockkey:0E-E5-92-0E-07-49-07-BB-AE-D5-E5-20-46-CF-09-82AESblockplaintext:55-55-55-55-55-55-55-55-55-55-55-55-55-55-55-55AESblockciphertext:78-59-E9-ED-31-7C-EF-35-AF-37-25-D3-AC-24-9D-CEKeyfornextsecretplaintextgeneration:78-59-E9-ED-31-7C-EF-35-AF-37-25-D3-AC-24-9D-CEAESblockkey:78-59-E9-ED-31-7C-EF-35-AF-37-25-D3-AC-24-9D-CEAESblockplaintext:AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AANXPSemiconductorsAN12304LeakageResilientPrimitive(LRP)SpecificationAN12304Allinformationprovidedinthisdocumentissubjecttolegaldisclaimers.
NXPB.
V.
2019.
Allrightsreserved.
ApplicationnoteRev.
1.
1—13March2019COMPANYPUBLIC46601112/41AESblockciphertext:01-2D-66-10-89-16-E2-9A-86-E8-81-46-A1-04-7D-3AP[11]:01-2D-66-10-89-16-E2-9A-86-E8-81-46-A1-04-7D-3AAESblockkey:78-59-E9-ED-31-7C-EF-35-AF-37-25-D3-AC-24-9D-CEAESblockplaintext:55-55-55-55-55-55-55-55-55-55-55-55-55-55-55-55AESblockciphertext:3F-13-F3-72-7B-EC-89-42-3E-B8-6A-96-79-F8-0F-96Keyfornextsecretplaintextgeneration:3F-13-F3-72-7B-EC-89-42-3E-B8-6A-96-79-F8-0F-96AESblockkey:3F-13-F3-72-7B-EC-89-42-3E-B8-6A-96-79-F8-0F-96AESblockplaintext:AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AAAESblockciphertext:25-F8-F9-25-46-DB-A8-65-11-91-46-FC-9B-26-0B-CAP[12]:25-F8-F9-25-46-DB-A8-65-11-91-46-FC-9B-26-0B-CAAESblockkey:3F-13-F3-72-7B-EC-89-42-3E-B8-6A-96-79-F8-0F-96AESblockplaintext:55-55-55-55-55-55-55-55-55-55-55-55-55-55-55-55AESblockciphertext:92-8A-AD-02-C3-99-8D-AE-13-4C-0D-0E-8B-41-E5-E3Keyfornextsecretplaintextgeneration:92-8A-AD-02-C3-99-8D-AE-13-4C-0D-0E-8B-41-E5-E3AESblockkey:92-8A-AD-02-C3-99-8D-AE-13-4C-0D-0E-8B-41-E5-E3AESblockplaintext:AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AAAESblockciphertext:BE-9E-E4-4F-C4-2D-8C-73-C6-5E-2B-6D-0B-24-54-EBP[13]:BE-9E-E4-4F-C4-2D-8C-73-C6-5E-2B-6D-0B-24-54-EBAESblockkey:92-8A-AD-02-C3-99-8D-AE-13-4C-0D-0E-8B-41-E5-E3AESblockplaintext:55-55-55-55-55-55-55-55-55-55-55-55-55-55-55-55AESblockciphertext:D1-C2-4E-76-35-2E-2F-CE-88-11-B2-82-43-02-CE-79Keyfornextsecretplaintextgeneration:D1-C2-4E-76-35-2E-2F-CE-88-11-B2-82-43-02-CE-79AESblockkey:D1-C2-4E-76-35-2E-2F-CE-88-11-B2-82-43-02-CE-79AESblockplaintext:AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AAAESblockciphertext:37-D7-34-A5-1C-07-6E-B8-03-BD-53-0E-17-EB-87-DCP[14]:37-D7-34-A5-1C-07-6E-B8-03-BD-53-0E-17-EB-87-DCAESblockkey:D1-C2-4E-76-35-2E-2F-CE-88-11-B2-82-43-02-CE-79AESblockplaintext:55-55-55-55-55-55-55-55-55-55-55-55-55-55-55-55AESblockciphertext:98-BB-7F-E4-92-79-DC-29-B4-FA-9E-02-CA-5D-A2-E0Keyfornextsecretplaintextgeneration:98-BB-7F-E4-92-79-DC-29-B4-FA-9E-02-CA-5D-A2-E0AESblockkey:98-BB-7F-E4-92-79-DC-29-B4-FA-9E-02-CA-5D-A2-E0AESblockplaintext:AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AAAESblockciphertext:71-B4-44-AF-25-7A-93-21-53-11-D7-58-DD-33-32-47P[15]:71-B4-44-AF-25-7A-93-21-53-11-D7-58-DD-33-32-47AESblockkey:98-BB-7F-E4-92-79-DC-29-B4-FA-9E-02-CA-5D-A2-E0AESblockplaintext:55-55-55-55-55-55-55-55-55-55-55-55-55-55-55-55AESblockciphertext:1F-6A-A5-2B-46-DF-E0-4E-CB-29-A3-D6-88-47-F0-24Keyfornextsecretplaintextgeneration:1F-6A-A5-2B-46-DF-E0-4E-CB-29-A3-D6-88-47-F0-24Updatedkeybasekey:1F-6A-A5-2B-46-DF-E0-4E-CB-29-A3-D6-88-47-F0-24AESblockkey:22-DA-7A-8A-2F-4A-72-1D-43-EC-1C-97-02-FE-77-BEAESblockplaintext:AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AAAESblockciphertext:16-3D-14-ED-24-ED-93-53-73-56-8E-C5-21-E9-6C-F4UK[0]:16-3D-14-ED-24-ED-93-53-73-56-8E-C5-21-E9-6C-F4AESblockkey:22-DA-7A-8A-2F-4A-72-1D-43-EC-1C-97-02-FE-77-BEAESblockplaintext:55-55-55-55-55-55-55-55-55-55-55-55-55-55-55-55AESblockciphertext:E2-39-B7-DA-97-EE-06-02-07-8C-BF-09-BF-59-F2-38Keyfornextupdatedkeygeneration:1F-6A-A5-2B-46-DF-E0-4E-CB-29-A3-D6-88-47-F0-24AESblockkey:E2-39-B7-DA-97-EE-06-02-07-8C-BF-09-BF-59-F2-38AESblockplaintext:AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AAAESblockciphertext:1C-51-9C-00-02-08-B9-5A-39-A6-5D-B0-58-32-71-88UK[1]:1C-51-9C-00-02-08-B9-5A-39-A6-5D-B0-58-32-71-88AESblockkey:E2-39-B7-DA-97-EE-06-02-07-8C-BF-09-BF-59-F2-38AESblockplaintext:55-55-55-55-55-55-55-55-55-55-55-55-55-55-55-55NXPSemiconductorsAN12304LeakageResilientPrimitive(LRP)SpecificationAN12304Allinformationprovidedinthisdocumentissubjecttolegaldisclaimers.
NXPB.
V.
2019.
Allrightsreserved.
ApplicationnoteRev.
1.
1—13March2019COMPANYPUBLIC46601113/41AESblockciphertext:FB-96-9B-27-C1-9B-E2-77-D9-3C-AC-BF-7B-15-F1-A0Keyfornextupdatedkeygeneration:1F-6A-A5-2B-46-DF-E0-4E-CB-29-A3-D6-88-47-F0-24AESblockkey:FB-96-9B-27-C1-9B-E2-77-D9-3C-AC-BF-7B-15-F1-A0AESblockplaintext:AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AA-AAAESblockciphertext:FE-30-AB-50-46-7E-61-78-3B-FE-6B-5E-05-60-16-0EUK[2]:FE-30-AB-50-46-7E-61-78-3B-FE-6B-5E-05-60-16-0EAESblockkey:FB-96-9B-27-C1-9B-E2-77-D9-3C-AC-BF-7B-15-F1-A0AESblockplaintext:55-55-55-55-55-55-55-55-55-55-55-55-55-55-55-55AESblockciphertext:F1-18-50-83-33-63-A2-62-51-99-74-DB-82-1D-DA-60Keyfornextupdatedkeygeneration:1F-6A-A5-2B-46-DF-E0-4E-CB-29-A3-D6-88-47-F0-24LRP_EvalIV:13-59ivNumNibbles:4Key:FE-30-AB-50-46-7E-61-78-3B-FE-6B-5E-05-60-16-0EProcessingIVnibble0(1):SecretPlaintexttouse:90-7D-A0-3D-67-24-49-16-69-15-E4-56-3E-08-9D-6DKeytouse:FE-30-AB-50-46-7E-61-78-3B-FE-6B-5E-05-60-16-0EAESblockkey:FE-30-AB-50-46-7E-61-78-3B-FE-6B-5E-05-60-16-0EAESblockplaintext:90-7D-A0-3D-67-24-49-16-69-15-E4-56-3E-08-9D-6DAESblockciphertext:F5-06-C1-D4-FC-71-27-6C-6C-60-72-E4-AD-EE-38-E5intermediateresult:F5-06-C1-D4-FC-71-27-6C-6C-60-72-E4-AD-EE-38-E5ProcessingIVnibble1(3):SecretPlaintexttouse:37-2F-A1-3D-D4-3E-FD-41-98-59-DC-BC-FC-EF-FB-F8Keytouse:F5-06-C1-D4-FC-71-27-6C-6C-60-72-E4-AD-EE-38-E5AESblockkey:F5-06-C1-D4-FC-71-27-6C-6C-60-72-E4-AD-EE-38-E5AESblockplaintext:37-2F-A1-3D-D4-3E-FD-41-98-59-DC-BC-FC-EF-FB-F8AESblockciphertext:44-33-EF-60-7D-7B-44-FD-0A-AD-67-BC-CF-4E-CF-3Eintermediateresult:44-33-EF-60-7D-7B-44-FD-0A-AD-67-BC-CF-4E-CF-3EProcessingIVnibble2(5):SecretPlaintexttouse:AB-75-E2-FA-6D-CC-BA-A0-4E-85-D0-7F-B9-4E-ED-28Keytouse:44-33-EF-60-7D-7B-44-FD-0A-AD-67-BC-CF-4E-CF-3EAESblockkey:44-33-EF-60-7D-7B-44-FD-0A-AD-67-BC-CF-4E-CF-3EAESblockplaintext:AB-75-E2-FA-6D-CC-BA-A0-4E-85-D0-7F-B9-4E-ED-28AESblockciphertext:1F-B2-81-E1-AA-3A-2D-EB-FD-EF-F4-5D-11-89-FC-E4intermediateresult:1F-B2-81-E1-AA-3A-2D-EB-FD-EF-F4-5D-11-89-FC-E4ProcessingIVnibble3(9):SecretPlaintexttouse:56-98-D7-B5-F5-95-66-14-D5-7B-5A-18-B9-B8-81-0EKeytouse:1F-B2-81-E1-AA-3A-2D-EB-FD-EF-F4-5D-11-89-FC-E4AESblockkey:1F-B2-81-E1-AA-3A-2D-EB-FD-EF-F4-5D-11-89-FC-E4AESblockplaintext:56-98-D7-B5-F5-95-66-14-D5-7B-5A-18-B9-B8-81-0EAESblockciphertext:2A-20-C7-B6-F5-C8-C2-02-7C-44-70-74-4A-6F-52-D3intermediateresult:2A-20-C7-B6-F5-C8-C2-02-7C-44-70-74-4A-6F-52-D3whiteningKeytouse:2A-20-C7-B6-F5-C8-C2-02-7C-44-70-74-4A-6F-52-D3AESblockkey:2A-20-C7-B6-F5-C8-C2-02-7C-44-70-74-4A-6F-52-D3AESblockplaintext:00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00AESblockciphertext:1B-A2-C0-C5-78-99-6B-C4-97-DD-18-1C-68-85-A9-DDresultofwhitening:1B-A2-C0-C5-78-99-6B-C4-97-DD-18-1C-68-85-A9-DDResult:1B-A2-C0-C5-78-99-6B-C4-97-DD-18-1C-68-85-A9-DD3.
2LRPEvalHere,IVmapstoxinAlgorithm3whereasKEYisthekeyusedtogenerate{p0,.
.
.
,p2m1}andkl.
UPDATEDKEYreferstotheindexioftheupdatedkeykiwhichisusedaskl.
Finally,FINALIZEdefineswhethertheoutputwhiteningstepisperformed.
KEY=567826B8DA8E768432A9548DBE4AA3A0IV=1359FINALIZE=1UPDATEDKEY=2RES=1BA2C0C578996BC497DD181C6885A9DDKEY=B65557CE0E9B4C5886F232200113562BIV=BB4FCF27C94076F756AB030DFINALIZE=0UPDATEDKEY=1NXPSemiconductorsAN12304LeakageResilientPrimitive(LRP)SpecificationAN12304Allinformationprovidedinthisdocumentissubjecttolegaldisclaimers.
NXPB.
V.
2019.
Allrightsreserved.
ApplicationnoteRev.
1.
1—13March2019COMPANYPUBLIC46601114/41RES=6FDFA8D2A6AA8476BF94E71F25637F96KEY=88B95581002057A93E421EFE4076338BIV=77299DFINALIZE=1UPDATEDKEY=2RES=E9C04556A214AC3297B83E4BDF46F142KEY=C48A8E8B16571645A1557825AA66AC91IV=1F0B7C0DB12889CA436CABB78BE42F9FINALIZE=1UPDATEDKEY=3RES=51296B5E6D3B8DB8A1A7399760A19189KEY=CAF3750AFF93F9A0C8861BCCCCDF1A9DIV=9273B7FINALIZE=0UPDATEDKEY=3RES=468C2BFCF993E7F112E150C17298A968KEY=65024B14AA99E9CA93F51172E19EE000IV=826CE8A26DFE768D91FINALIZE=1UPDATEDKEY=1RES=A3830865D52EAEBC6471CDBD3DFC0A89KEY=1EDB9D253DF18D72BEEAE960B6FDF325IV=FD7BBC6CE819F04AF0C3944C9EFINALIZE=0UPDATEDKEY=3RES=B73B50D4BA439DF9D4AFB79FF10F1446KEY=08CFACB758EB34F0106D42358F22B5EBIV=431B8F155EB1F28334F201CADD7FINALIZE=1UPDATEDKEY=1RES=40C01FC5DF4C142D9C9721F74A373BA5KEY=CC57E7503BCCCF260D6B4E2AB38ACE94IV=4D09838DF371FAC5D5B641EE45FINALIZE=0UPDATEDKEY=3RES=C1A465936A097FF76FCAF18166E8DF60KEY=D0E9C3CACE9A747A74F582AA0F873FF9IV=FCB69068C83E64765676F718E41E25FINALIZE=1UPDATEDKEY=2RES=A944D5A19C5B86392CC3CFC58F57C321KEY=59C9C703C66A9FD2948E0A48617285DCIV=F28EFF672184665744FD835B106484FINALIZE=1NXPSemiconductorsAN12304LeakageResilientPrimitive(LRP)SpecificationAN12304Allinformationprovidedinthisdocumentissubjecttolegaldisclaimers.
NXPB.
V.
2019.
Allrightsreserved.
ApplicationnoteRev.
1.
1—13March2019COMPANYPUBLIC46601115/41UPDATEDKEY=0RES=F078390B345FC6E22EE9A75B3D8BF490KEY=2E763263979117BED33A331B15E3F01BIV=2B96BFF1A8429C6EFINALIZE=0UPDATEDKEY=3RES=9193DA3870AA345EB4FDFB5EE4A35E61KEY=A14E397DA6C410440FA9EC4C61774094IV=4B42600DFINALIZE=1UPDATEDKEY=0RES=21C0B442BF41B7DDD80D4A99CD7B7B81KEY=921038ED913CCEEFC6286B756F9ABC8DIV=9FE171DCB4CA1F7E5FINALIZE=1UPDATEDKEY=0RES=9FF1DBB5E8528E56370EB55919642AC0KEY=F2512BC694E7A66D6ED67E0841BA2523IV=D0F92AC3F33EC12CF5B65C6ECE12DE0FINALIZE=1UPDATEDKEY=3RES=6271F38386E7399D7FA1709A72B4F585KEY=75FCA5E188F44F1E808597A0B7B690D4IV=64962F5DED0468F1FINALIZE=1UPDATEDKEY=1RES=EBD6F32ED75566E6756A14EC16715CBDKEY=1000076C2934BDB02750204704DAA472IV=8C3E0FINALIZE=1UPDATEDKEY=2RES=581C3B057F9312FECF4A7B8070C83B8CKEY=99B1647A76CD170EA07997043E1E7919IV=FFINALIZE=1UPDATEDKEY=1RES=BA5F895E8B57F7753EE5C7276E60B37FKEY=6983FC665FBB8BEA35DADBB2EF446656IV=BDF09818B0A7AFFF9C8FINALIZE=1UPDATEDKEY=1RES=E0A4144033A1CACD1DBCE30F9883A1DBKEY=9FBC2045FA6215B4FD1ABA412DD9C59DIV=F9B72310BDAE086C51D354B65F1F05F1NXPSemiconductorsAN12304LeakageResilientPrimitive(LRP)SpecificationAN12304Allinformationprovidedinthisdocumentissubjecttolegaldisclaimers.
NXPB.
V.
2019.
Allrightsreserved.
ApplicationnoteRev.
1.
1—13March2019COMPANYPUBLIC46601116/41FINALIZE=1UPDATEDKEY=1RES=3F410411D5ED704572D06EDE6AB45CA2KEY=1EBB6DF4E251A10B9503AE6B3EEB0ACAIV=CDD68EFF713C8FINALIZE=0UPDATEDKEY=3RES=28740D45D92737D6CF8F05D05B961424KEY=415F46BA9A3C3C44A7E1782117668105IV=590012E84AEC7FINALIZE=0UPDATEDKEY=2RES=9852EFC35E53F2A4E8DA55770123C99DKEY=371A061E4A3065D00F41C4DA68722FFAIV=52C78A675488DFINALIZE=0UPDATEDKEY=3RES=FD2BDCC3EA26AF2069A4C536E3D6B33BKEY=E28DFE591559441D04213D889747BC46IV=414E42E7FINALIZE=1UPDATEDKEY=2RES=5E8BF483C2D6DA906EC58D1B63AC9887KEY=18A4209AAEF2CFC67E48834ED7D2B62BIV=4B6E0EBCBB920A0B441114478FINALIZE=0UPDATEDKEY=0RES=D054F91224DAC4C9E46EDF7EFAB6D179KEY=FBBCE5B5F4BF962A345BBF3F13F9E474IV=D6B8F778C25FINALIZE=1UPDATEDKEY=2RES=73C265CD18C9F909784DCFC4CAA5109DKEY=8E90A2AEBEB136C000521AEC0037ACFFIV=B3FD7B7F1026CF70FF71CF8FINALIZE=0UPDATEDKEY=3RES=7F519F9B9EAB01EF8DED79520C46770EKEY=FA89CC662EF47C75A9887F12A6C9879FIV=B9FINALIZE=1UPDATEDKEY=0RES=4973ECE66EEE903D4761EF3960210735KEY=3F0E5E6D0F7F7BDE4DB2C4F074D02062NXPSemiconductorsAN12304LeakageResilientPrimitive(LRP)SpecificationAN12304Allinformationprovidedinthisdocumentissubjecttolegaldisclaimers.
NXPB.
V.
2019.
Allrightsreserved.
ApplicationnoteRev.
1.
1—13March2019COMPANYPUBLIC46601117/41IV=7D0AA4C30A75FC6C6A5D47D12247FINALIZE=1UPDATEDKEY=3RES=87F43A64DAF93DF744F54FECE1A480ABKEY=B443EC2B5E56AF789D27F6C38F9DD6A9IV=0CACAE327B04E870A3151E967FINALIZE=0UPDATEDKEY=0RES=795553EBFA89AD541C0ED2E5F3C4611FKEY=7DD9BF8D3337D57ACD92069B13B16CCEIV=2266169A6882C7E84FINALIZE=1UPDATEDKEY=0RES=49F4FFFEA580EC96D5DCACC9E10AA95EKEY=B39A5A07AB6746B5DE4875ED9492DF1BIV=F03704D4806A731FINALIZE=0UPDATEDKEY=3RES=635E39AEF94D050B5424E1D967027594KEY=E2703DC54BF4E7C63337FFF0AB6BB6F0IV=35D183BB4C56E8F70BFINALIZE=1UPDATEDKEY=1RES=3E537D77DE31EA05C33CE70B4ECE65FAKEY=DF19EF9394EE6344A0832AF8ADCBABE4IV=44CB4DE4352D3E45F5FINALIZE=1UPDATEDKEY=1RES=80F1A5169142107FF0873BC4222E8173KEY=24E6DD53E9FEE719486C5CBD07714FC8IV=24B80F682AF9B33FINALIZE=1UPDATEDKEY=0RES=4FA0477728E34E1408D98643F8124035KEY=FAE4C2544FF93C20BAA6D60FAFE4919BIV=87C4DBFINALIZE=1UPDATEDKEY=0RES=FD2847D87ADC24C27FA042D1DCA1459BKEY=6D1902203D17BCBCE3A0A961EC358517IV=CA5195213C2C75D37DCC6A67FINALIZE=1UPDATEDKEY=3NXPSemiconductorsAN12304LeakageResilientPrimitive(LRP)SpecificationAN12304Allinformationprovidedinthisdocumentissubjecttolegaldisclaimers.
NXPB.
V.
2019.
Allrightsreserved.
ApplicationnoteRev.
1.
1—13March2019COMPANYPUBLIC46601118/41RES=2EADE5706A4BCD7CAF844DE01B127CE0KEY=7BC16676A8522EBC2564FEC235654DF8IV=A885FINALIZE=1UPDATEDKEY=0RES=9819FE9556933E1CFC4E99C8BF64ACFAKEY=F989FF4BDDD5AB6999EF517B742EA085IV=C4DE07A5EFINALIZE=0UPDATEDKEY=0RES=D6FEE60DBC8BA533E320ED1D18076D82KEY=5F07C727DA21B6C1E2688237672BCB7DIV=8C74AC47C037AD729D38E3AFINALIZE=0UPDATEDKEY=0RES=6021FC212F818102027C61FCE28D382CKEY=549C67ECD60E848F773990990CAC681EIV=475BB41878EB17468F7A68847DDD3BACFINALIZE=1UPDATEDKEY=3RES=C3B5EE74A722E784887C4C9FDB497855KEY=9AFF3EF56FFEC3153B1CADB48B445409IV=4B073B247CD48F7E0AFINALIZE=0UPDATEDKEY=3RES=909415E5C8BE77563050F2227E17C0E4KEY=F2BBB25D607ECD1E551CD75CF0033CCEIV=0335137B5641EFA4F176836A65F0F49FINALIZE=1UPDATEDKEY=0RES=87832A9AF79C6CE436EA4DB6CAB18203KEY=806A50530D7735B40AC4EF1638E8AD6AIV=D4137764716DBC8C579BEAB7E76754EFINALIZE=0UPDATEDKEY=3RES=CF991392F0369350A7E21BE52F748821KEY=64193EF6BDDDC74C7C008DB98ED5FF67IV=89ABFINALIZE=1UPDATEDKEY=3RES=4A828E35DBADF6A465321363717D0D27KEY=F9E29780209AC952DD87C2572C4950BFIV=35AF18F46C2FD3C8C6EB507147CA35AFINALIZE=1NXPSemiconductorsAN12304LeakageResilientPrimitive(LRP)SpecificationAN12304Allinformationprovidedinthisdocumentissubjecttolegaldisclaimers.
NXPB.
V.
2019.
Allrightsreserved.
ApplicationnoteRev.
1.
1—13March2019COMPANYPUBLIC46601119/41UPDATEDKEY=1RES=51F3482AB8880850390F4F6D775F5C1FKEY=37A6769D43FEFA9F79CA61628BAFA7F1IV=FBFINALIZE=1UPDATEDKEY=0RES=81C84283D18071F08DE72AD51B5826B6KEY=047568AC57D4DE026C40F7228BDD1819IV=F1B11FINALIZE=0UPDATEDKEY=3RES=9CE6BEC0F80FDF7D78B1C219130102E7KEY=F36472663A3BA87F3E76399C66C23EC9IV=1FF73338D23ED6AE968FINALIZE=1UPDATEDKEY=1RES=36DA0902796F4682034DB07D0FF58E28KEY=906249E5AF810339F199A25AEC0281E8IV=56DA443282912622BB92338F8CAFINALIZE=1UPDATEDKEY=2RES=317600A76B5A7984A681D1D8855F86FC3.
3LRPLRICBHere,IVreferstothecountervaluerandUSEPADDINGreferstopadinAlgorithm4.
Forklthetestvectorsalwaysusek0.
KEY=E0C4935FF0C254CD2CEF8FDDC32460CFIV=C3315DBFUSEPADDING=1PT=012D7F1653CAF6503C6AB0C1010E8CB0CT=FCBBACAA4F29182464F99DE41085266F480E863E487BAAF687B43ED1ECE0D623KEY=EFA5B7429CD153BF0086DEF900C0F235IV=9036FFFFUSEPADDING=0PT=E7F61E012F4F3255312BA68B1D2FDABFCT=EA6E09AC2FB97E102D8CA64C1CBC0C0CKEY=15CDECFC507C777B31CA4D6562D809F2IV=5B29FFFFUSEPADDING=0PT=AA8EC68E0519914D8F00CFD8EA226B7ECT=C8FBD3842E69C8E2EBCA96CE28AB02F0KEY=A2D06401CDF35822B430F4457D1D1775IV=5C35A6EDNXPSemiconductorsAN12304LeakageResilientPrimitive(LRP)SpecificationAN12304Allinformationprovidedinthisdocumentissubjecttolegaldisclaimers.
NXPB.
V.
2019.
Allrightsreserved.
ApplicationnoteRev.
1.
1—13March2019COMPANYPUBLIC46601120/41USEPADDING=1PT=D2D83A1971077EDDFE2DF28DF9B736A4D9D4244BCF72E9597CB47B7DCDB5A4B245B52080E79BBFEDC69F1EE983CECT=73B1BED57B59090BC496799FA9BFE9F5252A88350A8F48A4FF252B8E813F6D96CA8BA7C8162E4CB2DFE0D53800FF01DAKEY=3CEEB70C13578D714860EEE19DBC8B01IV=104988FFUSEPADDING=0PT=3E1537842F53FFD5AD788DC6C0A14D25CT=0EFEEAE6249011EF6CD2D28980B93766KEY=D36CC09105FD0261C58FD5604486F757IV=01FFFFFFUSEPADDING=0PT=EF44FE3B50A73B1974D7D624B74012D5BEA07D9F91278035C470CD0BD0E753B2A2F90DBE638A3F2E252A112081DC98942F802D788F4F7AC8C3C876DFDA30498D842382BD32537134614F7A671660B4E8D738DB50B9DA23527F45FA9B145F54F4E0839C5D5ADA61DC0EF91740D513B263148E08A155F9D4A9002F3EED58D62002FA858692C3578DFDD7FE41BFC2E27D6CCT=F72471266DE22E2C66A6B89F20CA00859B63A41E396A592EF6673E3A5220DF70B9E0D3EFF3503F81F203573871CD5006679A10071B861C3A71B02B86C766576F35DE0790913E7A429C28DB6C398FEA5F9E140F92F5C6729F7FFAD38DE456F1D6222569B461568091B305AB69F19930BC489D18B8C3D6FA7B3D37467E4F3A6C9577E8C285C375A0B73970016BDB288AE4KEY=9397878556B29FE7AFF25C2A9C748338IV=D9154550USEPADDING=1PT=CA56B814E61EB2D25AC14E9AAB48E59FE3D0FB6360637B09E6CT=E1D03C38C92DDF5A7C5A3FC1AA52E74627192A01143D26E8F592EE5D3C335168KEY=AD9C2DDF73F7CA844BE8492F9A0C3D77IV=C9FFFFFFUSEPADDING=0PT=CEC19DAA67DAAE2E398185F2E6CA84155F5F9C7048C4BDEB9649B920A7429FC3F2372809E7A1816E806BD2BCF2D732F764290B9ECE7CF30A04B1131D218E87F6E2C2FFAFA17A2DBDDD2DF0DCF101F8BFCT=AA8D27EFC3D3ABF80A487C6C3577B2AB6B2FAA4317C0B3EFBB8C9A301F21C5FD2FE0E2E27B6516B8678121091A411D8A08B7E1111E9DB13DB169B2D305200767NXPSemiconductorsAN12304LeakageResilientPrimitive(LRP)SpecificationAN12304Allinformationprovidedinthisdocumentissubjecttolegaldisclaimers.
NXPB.
V.
2019.
Allrightsreserved.
ApplicationnoteRev.
1.
1—13March2019COMPANYPUBLIC46601121/419E84BE742D4AEABD11FAE5624D49EDE0KEY=16C1BB7D3701F476431E05368D634DF2IV=E4DCDA30USEPADDING=0PT=4DC0A08C161803B9540760D209BFE1CD896C8375F72F79E0FEF81527C8E8936BD182E94054EA2D05027D395CED1FDA1CF8634D16D274031E46C08E1D03DCF06C74F40187D6A0789F3F7D737AF51DF3DE1EF92E649A7C985D7ECAFA945C0F02268CCDE8F81D524558EAAED75500892829CCAFFF09AD8CD1F75CA4090CA5E4422F7B4DEE2835FAC0CBB3D579EBA4435CF5A1D1C7AC0FF878FFFCF09B794939B2066BA7D9B39A00F3D1EE3356D812E5521947146AD41D961F83D5EE2B445F47827A227380FD69A85AA1DDF5BEDBA29FED16CT=B1CF729E877227D606F104827ED07334FBF1AA7782341C77BBEB31EFAB36B96344431098AB2658A5D7F7ADA4B60680C5727F418037DEF71DA1A12AD4C621C74CCD0C3923769798BF7B401C91AA23B060358B7BB3FA831B1D06A85ED5EA8B0A8B1747BCC6D64D3639F8D1B8EBB633C4A02279B59C7E250113080B0240C2947E73BC774B8A1A981F85FE9C18D1C9BA025954E803C08756FC1FD9B83E0CF56C41EC6D32C0EE1946CD6E80E541CC9A0A407C6D171855D0793080A0FE423A0D1B63C45C03F7789552F28E72849DCC42F31F91KEY=9D813134CFDEE9D58755DEACD4AF72A7IV=FFFFFFFFUSEPADDING=1PT=27CT=F5833FC397356EA3D9ECADBB9F6FE440KEY=D744E1350115A7DD154DAA448AAA7513IV=CAAECC2DUSEPADDING=0PT=E94EB047D1927A06E6C1FE4374A8AABECT=5A00BAA47E1753668D605A1998843DC8KEY=08949164317113BBE09CD40CFCC9A4C0IV=191B4BB2USEPADDING=1PT=5EC9AC319F21030D25EE85C595783BF56635BE6E0A1C1D3E2A585CF859A8880E918C134A0EAFFCB208EEA3B53A5386D3CT=AE617C37C4F55FD711DFD2E3025524C7CA08571CC556A3C85C3BFC9652916070D1CEF452A089F65BE4A981EA9694CCF1NXPSemiconductorsAN12304LeakageResilientPrimitive(LRP)SpecificationAN12304Allinformationprovidedinthisdocumentissubjecttolegaldisclaimers.
NXPB.
V.
2019.
Allrightsreserved.
ApplicationnoteRev.
1.
1—13March2019COMPANYPUBLIC46601122/41133087AB70D7FCC7EC9496F4F83ADEA5KEY=7770F8D6C4639941AB6E0746C40AB47CIV=65773408USEPADDING=0PT=0B651B786704D6D28981E9B0B24A2EF2D19EA0A7B5EDFE3A274FC31F7E6D8689409DB8FD7EC8446A31743B89CBCCB32CCT=55BEB785703EDE175B4EA69054023EB3CF3996C55D3D0FD5D8ED757C397E066C1453ADC6879FF2F501765524CAE5AA27KEY=061593514510831E67E1511741B6541CIV=FA5F6F15USEPADDING=1PT=7641B2746F5A9C961968DA3544301999969C762C297A1F1E8F6C5D9E9AD5A089F60F99416BF372F77BAA9DEB42C51B3EFBF899D7932E0DFB2193E502FCFEFB43C7503E3497D82EA32A7EB17EDD34DCC9511EA2A23CC9F6C8029D20D80D6FFA7CAE5923F187E6A723C9F6AC14CT=B3CB99514F0AFE7151C3743FAF7DB17E622529CE16F3BB9203BA7DBE45DC89CB3AFDEF19F47CA9BEB54B46F0AB3347FC80BCE7BDF21A2DDB4EB6A425923977FD201A8163865E9BD73B4384702BAF33E7D693DE4D8F6DA00097133E3AA77E25BD5277A24DF1361B5F4725C9FE4CF89145KEY=7C8E1EEDB71BB1DE5B5907FE5A7532F9IV=B85695BBUSEPADDING=1PT=426A777FD8451CE14C737F3221F1BD1CCT=9B5C42B96086FB2A9A9AC0B280F020B4B4734EBAD2D6A73BE758B9C8CC7226E5KEY=215551249711B3AE6B7361F19048BF9AIV=DCCCFFFFUSEPADDING=0PT=7929BF798535A3FE67127A32EC5330B7CT=6C4D5A30B3102D627721D19EDDCEC534KEY=C91464E42B5004B4E556541876B546D4IV=8F421EFFUSEPADDING=1PT=354467EF78A8909DC61CDEB628250A94CT=0ADA577B841FC5CB112230336B33CDA7NXPSemiconductorsAN12304LeakageResilientPrimitive(LRP)SpecificationAN12304Allinformationprovidedinthisdocumentissubjecttolegaldisclaimers.
NXPB.
V.
2019.
Allrightsreserved.
ApplicationnoteRev.
1.
1—13March2019COMPANYPUBLIC46601123/412E17D303D05EC66CAECF892B0C282DF5KEY=2EE08B87B1CCA5A2A93548C2952E2526IV=3827CF6FUSEPADDING=1PT=B8B18BCT=29E99882A0DCED4E55FB3E61303DE275KEY=F5C3E99FB75E316B76689FC5464260CDIV=0797F6B7USEPADDING=1PT=CT=93DC3EE14B612BE6A3E9E2E8040CDFCBKEY=C7031CA1994DECF01D4084D8F577C6F5IV=CDB066D0USEPADDING=1PT=CT=3B1DAAC45010793FD592FB76827796A5KEY=10E7C2FA0DF36D4E89F05B15C9DD1BB2IV=D42802DBUSEPADDING=0PT=B150EFCB5EA66A0D8888652AF6104C17CT=ACA71BCE7E9057EA8B834B37BF028D1CKEY=896B876BDF03D34B1DE3F8973323FDC7IV=FFFFFFFFUSEPADDING=0PT=4054B588DE18B6C46BA699C3E2AD7DA3AD7AADD3DA658A9D97BDB3A99805403D7BD7C27E959405E0E16EB7572ECF55AE25DBD5B09C1D2EDACA18F120640C2C66665C480BEAFF0D1975CDF26BAD336FC7CT=60801EEFA4D5506A73753F826F82EFE6B02E6579BB654256BAC5C7ED81E16A190BF8953A056FB869A9C5C10C87AE3FDE28CE32730B290F4EB0062E96AB29B40F764AD5D8ACE61997EC515BB69B24E6C0KEY=680583BD2F90A05DA9E8B37DA2E47CD4IV=4151F0D2USEPADDING=1PT=3BCE2BC22D96A92AB85E896F36D6BBEA6102CT=82A7917C5D9B16C8B01277F3E4FF6BD1NXPSemiconductorsAN12304LeakageResilientPrimitive(LRP)SpecificationAN12304Allinformationprovidedinthisdocumentissubjecttolegaldisclaimers.
NXPB.
V.
2019.
Allrightsreserved.
ApplicationnoteRev.
1.
1—13March2019COMPANYPUBLIC46601124/414BF404176F344188F7F8AB2D072C0F99KEY=4B8F7691511E2A5C429C401D415CEE73IV=55D131FFUSEPADDING=1PT=D2CT=83FF5F0382BC7EA5C795122C83D3B0C2KEY=1B1A179CE9C0DB3E45A97D0D98D0530CIV=E9FFFFFFUSEPADDING=0PT=472DBAFE6434D357402785A3348081B02EAB54244EE9C9C88E91001C5158992DE36E79AD844645493940902C8746669BCT=397C9EFFD28C560411B934895C8DF60F082B9560778F8571B5C31A057B34C2352F11B5634788623499C6BDD5C490F5CBKEY=ABD094D694942C5E64F26FD333B705E7IV=8E57BFC6USEPADDING=1PT=CT=C96E153DDBEC9B8CE23A142A34230CD1KEY=EA0D599D41482A647081C4C3994F411AIV=48FFFFFFUSEPADDING=0PT=86A093D7A4AC7089A91E04C7B127A8CE468423CABE6F84ED8B9A10F4F568D3B1FF11C18AD099DC18530FA6231681E0AFC8473CB585D371161CA64C0A9C7B94414B53C79F661EFDADA80B76AEC960D609B9602CAE2B1D2B2CA0AA6E2A4CD27BD87A65D8C3BA4149A9498F0D7A5CC24DBBCT=557D92979767DF003FAC2D865C5650FB00936AE565D4413A506E82DA0BADED4CCA98E0F82A602893AE2C8122F2757E3F20AB6AB5D66EED94F2C7908E3AB0F03F1B6FD87DF5FB347C0A8A8F8C8334B4A89D66D4ACA4D5E1AC398F9198723A54EAE62E52A331D18E2F252C2737DDA6A950KEY=D042503B4FE6152D279BFFBBB0D360D5IV=8F9E3364USEPADDING=1PT=649C0FB1CFDD5CB2590A814089944FAACT=7BB7E3DA21CBCCEAAEDB71798114656C331C7D2DCD661C43F679FC50FA0239E5KEY=9B1E418DF9752F37EBBD8EE833BDF2D7NXPSemiconductorsAN12304LeakageResilientPrimitive(LRP)SpecificationAN12304Allinformationprovidedinthisdocumentissubjecttolegaldisclaimers.
NXPB.
V.
2019.
Allrightsreserved.
ApplicationnoteRev.
1.
1—13March2019COMPANYPUBLIC46601125/41IV=24FFFFFFUSEPADDING=1PT=55534E159F14DD7731368988EE6DD7C6114E747F9C17A91BBC12D68C26531F2FFCFCCT=158B3B9C6136FB715CCF435CA4CADE808D1F98431327061A9A64D52A5FE7B2746D7F5A633FC0CFE7855656AD3C6B94CFKEY=D9E39CA8EFD45645C1A19B44920B46AEIV=B9D3EA7DUSEPADDING=1PT=3D5050DD16598BF294F32A695F9F2956560880787FCB4677994C447F1F9B39694F629605F5E38A41B8A077528450734A5486E7A1B2E00D7209D943CA150CD3F9BAC119FD092361727E3FBFDF53F4F249CT=0241258DBBC6395735FE6F8B81BB958A3758FD7C772F801EA689A1B3DB83D711CC0E16CF08AEFB39E3DF50551AAB8293E16085B0B7805C2CCFB9A0D2E8FC73542C844A35A9B352F750F8E9344591E2BEC55C87E4AFDE1FA5FAB6AF09357EF28CKEY=D9F92A98B398B76E5523FC1B9FC02CABIV=CC7E98C3USEPADDING=0PT=752273212D1F14E6FAF01BE13A452109ABA7E52646D2BE121313D55C2F1262B8F9743D76434D2704E735A5CF10CA913876B98BCE5B0ADEA263600D1A49B7B6E78D63E7C607AAC65D7FE13E112DEF0249819CE57687945CEF959B13E33F0DBA307EBD41ADE2CA30CCF32D4E7ACBCD75745EC498ADD14060F906F8316C97E21E72260E936FAD5466B66B19825A45E224C8259E847B740D5E3D5D48A7EA99C334100EDC54BC3A06C60A5DE141B8BE06B323D36847F85DA3FD18B0551265AC7C1DA7E4714B698E678E1ED87A1E92CCA67E57CT=6CF4254823B6A182B155A4280F5DD9B86F83968BCA07ABB552077647446C5AE41584B964CB69C03B84BBA9CD181AF60848488B355B058FBEC74FFF11F5A4F05AD15138FA2C4C71BA0AB15C35EDEA9958F6C1904CEC673936554611A47BEDEC467387B99E4D3415C716AECA75039F4FBDB19BE15E042E81522CD819122D3B9D007B9D5DF4A11AFC4FEB58DE24821CE507B2B2B720355E3B23275B05AC543C61EC3905B01B1B3704A86577FE7B4204FC848AF94E612C2A168568D4F44326113AEB7F767E5B43A4B3B2987EDDBD279A8E37KEY=948316307C3CB26BDE3B0CE4F4605DE0NXPSemiconductorsAN12304LeakageResilientPrimitive(LRP)SpecificationAN12304Allinformationprovidedinthisdocumentissubjecttolegaldisclaimers.
NXPB.
V.
2019.
Allrightsreserved.
ApplicationnoteRev.
1.
1—13March2019COMPANYPUBLIC46601126/41IV=C4FFFFFFUSEPADDING=0PT=20E3846A4C09D7BAD12965EC2BA8BFDFCT=BB1942D3E6F866ADD796B7EA85755D57KEY=8A525AA92A771D3DCE32D2329C49EEAAIV=5653FFFFUSEPADDING=1PT=33CT=352BBE318443FB9A095621256F9FB523KEY=7BD86E2B8DDBBF431130FDA8C5479C19IV=37A41E87USEPADDING=1PT=1762579CF1E8E9C1F6C4A7A5C089AB992555740A9FD7D5CB681A07F9C042969F9EE3A8E0B9940CC0DB85A5558FFF5EFE8F21708117E459408C8B33D7E0F001B42D0807DDE0CADF9149B32E1931803C69BC09699ED11587B98968532D6035DFEB84F12787F8801DC442DE3864B63F0F0C4FCA1AD78763E218814D537877B13114D443953F58B5703BEBA45BF2DD2303495946DE951A0763200E0F06AA2DA44D90AD238F72CT=C1A48806D8F8A135B7A68636A21203D4A414AEEC663557BA029DB5665EB7BEB69A93E7812277279B501A8EB96EEC64E66874AE7EE33A80CD5D2C3C65B02BF125B989E6BB72BFBC6266A915EDFE05D12B967E8B5C29D37A8B5A4DEB0DB7CC32064EA95C802377C4C22AE5AECAE61EADB9062B8E88382A194ECEB7F08B211FA9E3B1A69D9B37C243D47C9AA56C969C3BA8E2ED668E83BC369CB5C423EBF9A226E7AF00721AFFEB7AE544C9BABD84E4EE3EKEY=AACFB49A5ADFECE208EF3B5D4A091F30IV=D3FFFFFFUSEPADDING=1PT=4657CA45B993909F8992433B3B1B81181ED4A85F23851CBD112AC292369E6BEB93D0A58A3DAA82C9BA6A959E8F60BDB15E5C12740667EAC13B0C338ED1FE69EB2758A76A75F7DA7452DEA5B9EF7D2EB16C1034D98BF7E42CE6E44E3076F3F7BB01A97636B8533B67819E2127C130D1BDDE8222C1CA8F6030737B8391A8AAFD5FE6E9B84606F7F819D4CD58EDD5BD6AB6129051F4D136F1714946C33DCFAABED7A0C240D7778AB7E78A09EDFD37725AB610CD7E1758088DB0F846FCBF33BA492A0ECT=E55B18F8DF0546749E5637BDFB11460BNXPSemiconductorsAN12304LeakageResilientPrimitive(LRP)SpecificationAN12304Allinformationprovidedinthisdocumentissubjecttolegaldisclaimers.
NXPB.
V.
2019.
Allrightsreserved.
ApplicationnoteRev.
1.
1—13March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emiconductorsAN12304LeakageResilientPrimitive(LRP)SpecificationAN12304Allinformationprovidedinthisdocumentissubjecttolegaldisclaimers.
NXPB.
V.
2019.
Allrightsreserved.
ApplicationnoteRev.
1.
1—13March2019COMPANYPUBLIC46601128/41IV=275D6CFEUSEPADDING=1PT=31CT=A126BB809FBA89EA9F656104F449BED6KEY=10FC41C1139DED067FBED69AF5F47CD7IV=AAD66DEFUSEPADDING=1PT=0F22A828CT=D47A868705A125678D9B1B8FF67978B7KEY=1D959B5A35D586FBFABAA961B4EA50C2IV=760948FFUSEPADDING=0PT=4A19B8E48ECB5E56A040FF9ABFA650AFDCB246BE46C8D746B705DA2AEF0EF7F5481F8B6D42152CDE035E490FC3DC4AA12D8932EB6052CF8241722C88F0336692490951A01BE36DC68667BBE77EC883DBCT=D9339BB44320E9A58113E928753A441C499E17B4289C7FA1ECF6F640C42618BE599A3C70E475325C3123FEA5E2C2B2C2E17046EA3610EBF3DD50FEC8EC131B9E52021A8A4B5826CD599C05C38E190358KEY=BB38FD66DB0B95F54F092BD0E9A3EDCFIV=F7B7C5B9USEPADDING=0PT=6B65F897E80379EF50CDB836FFB63E74CT=800B79783988A4B9C38B580DBD43B29FKEY=5C5112B79CDDE37AECEFC602C95110B2IV=B24A6FA6USEPADDING=1PT=98D5CT=98B5D3CAE67A2AE3C05455E5EC5FBFEBKEY=3498F80187442E5974927F8E827DABF8IV=3D7725FFUSEPADDING=1PT=D7CT=CE6ECAEC9FBEAAF74C2AD5AFBE66B697KEY=FDEA0C05BB450D4553F7C47A8423B73DIV=20CBE124USEPADDING=1PT=98192E1443BBEF6D306F678DC3487437CT=B473762E32201AD37E60A64945A7D312NXPSemiconductorsAN12304LeakageResilientPrimitive(LRP)SpecificationAN12304Allinformationprovidedinthisdocumentissubjecttolegaldisclaimers.
NXPB.
V.
2019.
Allrightsreserved.
ApplicationnoteRev.
1.
1—13March2019COMPANYPUBLIC46601129/413912F4280283876BD1672F62062A9254KEY=570079FCA0DC05C863E96473B8497B45IV=CAFFADF3USEPADDING=1PT=CT=B23F34E57538504915DDA4479CFCA3FEKEY=17F248D6920799AFE75B6E4E3E1BBC14IV=FFFFFFFFUSEPADDING=1PT=9B8020184B707288E9BCF1D1E2CBC4D0ED0DF78CE4F1DFB18D5BB20E630B54B5CF43FE2EC74222DECB93D25774E0768BCT=8C8F3AB5C6863E45D1DE3DBEB1CFF992510ABB95B44188B71EEBAA3E86655BA9A3F59795337F7E2299AE771D3428EC7C01AAB4432B046526A9641FB580613CBDKEY=B7E4F9E62A37DFAAA16F8BF0BD6325DEIV=683C01FFUSEPADDING=1PT=511E883CADE426577E126D8A9864548D58B73220686DF3EF37DED8BF20DC4EFB11768E8B1932DE0B970BA7CCFAB2693A7809B0F3B8F857E32B9904CE0C6736A2CT=AE43CEB7586F6BB2848C623E01E26CE2575CE57EC97AB064E498A5D0D8831399E7D40471B5F7E984F679E0D8183D831D4230679D24A21FA47F8D9E6775B16C08B5367247F68ABDD4E6CF6196213BFA1F3.
4LRPCMACHere,MSGreferstotheinputxandMACreferstoyinAlgorithm6.
Forklthetestvectorsalwaysusek0.
Finally,Kxreferstothesubkeys(K1orK2)usedinCMAC.
KEY=63A0169B4D9FE42C72B2784C806EAC21Kx=84F2F5E532EF011BE4E122C3CF215FC1MSG=MAC=0E07C601970814A4176FDA633C6FC3DEKEY=8195088CE6C393708EBBE6C7914ECB0BKx=2D22571A33B2965A9B49FF4395A43046MSG=BBD5B85772C7MAC=AD8595E0B49C5C0DB18E77355F5AAFF6KEY=59242F9365E79E5F155B1430D8BA2E56Kx=785B8545675572C4262A9801B1559947MSG=NXPSemiconductorsAN12304LeakageResilientPrimitive(LRP)SpecificationAN12304Allinformationprovidedinthisdocumentissubjecttolegaldisclaimers.
NXPB.
V.
2019.
Allrightsreserved.
ApplicationnoteRev.
1.
1—13March2019COMPANYPUBLIC46601130/41MAC=B8306666C22F9FF3B53A074C6004ABB5KEY=E7FEB463C2498E04EFC5BF503473FC3AKx=EC31EA82E247DB1AAE486AE404C5D252MSG=F3EFB6B0D4A7MAC=C17AA38420EE2AA13087578CFBB0B7F3KEY=7860B864632C6C8BC9A4C06D49D7E2AEKx=C3D55306E216D704D6FFDB120D56B990MSG=DC7FMAC=59D3D3A4307A3BBD8E8E5F4B8E75510DKEY=E2F84A0B0AF40EFEB3EEA215A436605CKx=6843C8FDC5C7AEABDF473D186A42EDA3MSG=8BF1DDA9FE445560A4F4EB9CE0MAC=D04382DF71BC293FEC4BB10BDB13805FKEY=D66C19216297BAA60D7EA7C13E7839F9Kx=3E97953DA78AEF240AD537372C51D471MSG=56076C610CAFB99D0EFAB679C360F34202655178EE7E7236E8BFCC1C66BDDA17F2F67F65ADBF55E70009FE84F0477B1845B7E5B48231FBD89436794CE39D36511F9F86CCE08E95430F6977E57FEE45A044B3D7AFD72694C1FAA6D07645080363D2AC6451C1AE37B621A1MAC=EFFA1488A73FDBCE5B91BBF9B8D51775KEY=A418BA1658A6F0D90830C58679F80AC4Kx=43033791EEA9FF04B189958D562C6A5CMSG=06MAC=FF9561CC6E45FFFD4388003AA5F61233KEY=651312D289F4DE957C208D35827C07E4Kx=3854A163527454454441B1B4C7D3B835MSG=D39E4B336C46FCDCFDF803A49EB3A603851CFCFA72B3A5F843768EBDEDEB939891059275C79F1DADE2B97E288A91E3MAC=9B1530F1AD35213EB8903D5610BFD7C4KEY=C960E0C80D89728D1FF952EFF5B83FEEKx=C0E47345C0AABE83D0BE0CE2624D9097MSG=21MAC=4EBEE65E5DD0C30F89C8ED49A3D2BF32KEY=313CE6FF4F18B9357C6EB292C55C0D22Kx=4CDA79316AA8E3545DD4673189902BECMSG=7C74AF27F5A2CA6BC4207E4AA82FA3E20D3A59D4E97CE43D62F2E2E1EFDD5AF420AEB5C836D85975EECAB84D33481D2D694078D5C5A388FF9072C402C0E97CE6C6892AF97ADBAC35E0E4E61FC497091AD5B577AF64842F7D26B538C31357B5044ED187AA1D24B38E9343F5E0BC683BF8NXPSemiconductorsAN12304LeakageResilientPrimitive(LRP)SpecificationAN12304Allinformationprovidedinthisdocumentissubjecttolegaldisclaimers.
NXPB.
V.
2019.
Allrightsreserved.
ApplicationnoteRev.
1.
1—13March2019COMPANYPUBLIC46601131/4168A92D0B71CC81415AADD2C4A3E821892FE1D1F2105FFDB101E91B21MAC=74637ECB978422D4426F8F876A70E721KEY=8F4EC0BE7A3F5B6A2AAA92814F454F70Kx=0EE5492230A06FA5A2F89D767923B58DMSG=6CB1DB9648E809AC7B0988B160B20BED144A648DB75E854E50A2CA0F8D5F13FE70FF229CE427315651BDMAC=CFF39D67CB2B1987DDE2841E4C7F6225KEY=AEA00AD0EF9243833DA4861D6A0D2C8CKx=50368F14FF9E0252897F46B2D4C92142MSG=MAC=954230A72692BAB4CE1A44473D081376KEY=F91F1CF58941608F6F08ED190D3BF9B0Kx=125544328737911A0A9415C9CFA07712MSG=CB09216F785295157058E08B38579E91AB808E8E02D47A508A78E1705D4847C6F3E52E15FA8611EECB7AFEAF0C8ED5E45A1E38C4F02335F68ED1E4FF7024B72810199752298997246EA0C387D6CB43FCA3FD153E0F83D6CFB0378629A1127EA6C3D69EF3F683BAD18714565060AD20C38DE75C720F79188D43C8A1F2026E825B211CC4FF2C50061F4343B7FB2C856E0216C29BB9B60B9749BD11AF2DE1C7CF1991FA2F43E820973DE13C2FCBC11D60BE599FDB3FD2C9A516857A411BA0D93E7B749E6A32552B19F52B5ED879DBCC88A0B0F1D342EC8F46C85418BE6EDF7C9C08FEB45623B22E682E85E61474F02C3AB8F2A16AAF05FC8FE5MAC=5D5E7B4182EBD50B31FFE52DE4AB5C11KEY=57A2DD3D6DAB16AFC1D07B277664ED82Kx=7F2FCD9F8E4A8E3725F0071B9C8743B4MSG=D2D728DE057B3EMAC=DBDEC069CF2B46450CEFB34FFD80D840KEY=11ED02022570CB10502BC1DACF64B21FKx=B6BB0A6CC3CA379226EFDB9D6C457EDCMSG=E825603F896A85CAB45E6730D89DD4CE78010599MAC=4A1577C366D53080D0DFD1CC47EE3CC7KEY=DD315EE3E236161FB777CAC2EC8A29C7Kx=1AD7728D6A4A0520114B130B9D55BD81MSG=469CCCMAC=E45A7903A8B9B0366309BB11A451E244KEY=5AA9F6C6DE5138113DF5D6B6C77D5D52Kx=2AE0EBD376BCD4A27B1CD406D2431CF9MSG=A4434D740C2CB665FE5396959189383FNXPSemiconductorsAN12304LeakageResilientPrimitive(LRP)SpecificationAN12304Allinformationprovidedinthisdocumentissubjecttolegaldisclaimers.
NXPB.
V.
2019.
Allrightsreserved.
ApplicationnoteRev.
1.
1—13March2019COMPANYPUBLIC46601132/41MAC=8B43ADF767E46B692E8F24E837CB5EFCKEY=4F41663FB985F7B47200246449B3DF33Kx=80AEF0373782D05177726FFB0FA4F3C2MSG=52D12581AC3FA13F2135F325130424ACMAC=D21C5F1F7881C84540373E4AF9C01714KEY=FDDA1F4B99010C07521C4B74633559D3Kx=FCB9B67395C53881D443449302C0D47DMSG=BEMAC=D3C4EE477F4FA5092B1FE726C18C3D01KEY=0D46557550CB313F36AFBA87625D961AKx=3273289C6F7DBD9140A3AC11AB96F495MSG=90MAC=F7C8553DED574829E6EE68112CB3817BKEY=F32DDBECDB1F527C06B46B3FCDD8F623Kx=D2957F516B0DF1971B6B2147C68213B2MSG=9CB9DCD3FB3DB886ACAB218F7D52289964EF11ECBAA8051B2290BD23EC9F84481CAA5773FF18E0E299F55A094AB05086CD894D51C3252BF4B3C0MAC=9E1107B058A7C310F41AFEDB3C0E58CAKEY=B06A7F949A0D26D872D2FAB4994B0E2FKx=3A805DB26699EBE2A3CA749A9888E06FMSG=7240375662513285F67F63C03E677562MAC=4249F423B3137D3C5EF9A315C4BFD1D3KEY=055A4CE2713D7D8B18EF014394D266A6Kx=359AE1AA196387EC39F9E8E608FDC826MSG=MAC=8D8FDCF864C745DF8ABAAFADA00F5074KEY=2A473E38BBF4537C5397F45AE498CD4DKx=5D5F27EC92608C0712D3878A83F7B0E4MSG=C2AC3D7250EEF02318BC084F294B1AC72291EE1DC02AF424941CAAC685FCA59D9008679B00C56A0562583BDAEC0BBAMAC=66DC2BCE269B793B4ACA1A4D04DDD668KEY=4DB286486F2B417498B819DD33442A9EKx=D41D109EA30E10E137CAE834B59F8B14MSG=E37EC65C26E8BA67EF193889625C13FEB436724E93CFE3E7E836C138BA1EC3814C996A34C0EB4943860CA99EE154D1E7169F67E1F8708D149ADE74EF2782ADD056B63CC8F2DF3EC8EC2EC7872545069365D9221BB7E188DC0C5599E177591C045FD9472A1809F536609FF4CAA806EE55D8E08A4D5F911875NXPSemiconductorsAN12304LeakageResilientPrimitive(LRP)SpecificationAN12304Allinformationprovidedinthisdocumentissubjecttolegaldisclaimers.
NXPB.
V.
2019.
Allrightsreserved.
ApplicationnoteRev.
1.
1—13March2019COMPANYPUBLIC46601133/41MAC=39D04705396D2ABD4CA96B693FC20B04KEY=2E5FBC9C465D509212C3274CFEDC7B5CKx=77A89510033CEBFFD5EB02AC2DC518B3MSG=BEMAC=BE0A9F7E4F4C9C55A35D0F90DC0FF866KEY=340567430897CFCEA4CEC0D2FBB84C58Kx=2A22AC48EFA945339B22E335464B4B96MSG=E5DEA257FC642D6A74D60187702BB635MAC=B9A019E7BB4A84929365B6414D84B849KEY=0254B8C2431E598C2BE0C20F8AFBB8C7Kx=E880EF06E1A19AF718B35E80D32E45AAMSG=ECMAC=CC6D34A67B2E3F08221F1F23C498F3B8KEY=0C32A26430F8BE4A8B8D9523EEAE969FKx=0A0D8002F377B0C00F7AF0F5A9E71753MSG=1BA21EDF781D39FC69DC8F6F15488520DFEE60CDE1553579670D0A31EC9288A0AFC1F1908385B7DA854D21B106B3D866107E94D8254849C66CA4776B130810D753EEC05456F59C5936864893338473B334A3206DFDB07B66772A23DF0D4CC67C3D4A5D17F2840F1BE13AA19E00B693E830C4376FE8A2D9A2735ADC2CD2BD4CE9C0CB56E8265BC0AF94058CC20EMAC=0C4222286E02A484217881644CD11A7EKEY=DD65C1973AAE481556949A70BBA498A8Kx=AD46B292A44636C9935DAC161263AB3CMSG=DE3560AAC2D50387DBE216179395F41BMAC=E19DA6375B7D44AC7EF2DC379E496775KEY=94970E03D46936BB786BB72807B1BB67Kx=200B7BB09B59E00D4561DA915298BDA5MSG=ED78D9458DMAC=E9779A2E7A2F713C3692E71D1704AA00KEY=7BB18459270EA38C4EB115EAE374FEA4Kx=10CD915058439C89AE22B6CB9712804BMSG=2927AE423C96C4BAA61E34BE46EE8436MAC=B342A9697FC469EC29D554E24742936EKEY=1E44A8857A620951EA738A31BBBB21BCKx=C4921E131FCC7E2B35A78860AF480902MSG=17EA78DED1A793E12B9C86796D1312745605C71D5D58C90B92FEEBFC7855389CFA61075930A6A8BA7670BED604B84DA70F4713088A6D78BE20NXPSemiconductorsAN12304LeakageResilientPrimitive(LRP)SpecificationAN12304Allinformationprovidedinthisdocumentissubjecttolegaldisclaimers.
NXPB.
V.
2019.
Allrightsreserved.
ApplicationnoteRev.
1.
1—13March2019COMPANYPUBLIC46601134/41MAC=FF3D98D31F457AE0D957601ED44F3777KEY=6D4BD3BC9668D663E97F0C0CB844AF5CKx=E37C71B522A797C67EFC6F5B54683C10MSG=06DAB144ED31412F118CE94838C25AD5FEE008E8721BMAC=6BE23B4AFE1F608BCA215E94D7AADA51KEY=38419B570263AC7EC78B252E66712277Kx=ADAB17D7BCCA53117BA64E2E553F88FEMSG=F323C37F8255860DC6E4B07FEBA16FA9MAC=C2D8DAC25EDC2FB9E9F2DCD010AFF945KEY=952FDE8393C45D230A5BE9B38636D154Kx=6F97C6586DED928DEFFEFCBB7C71C643MSG=D7800E257001A774AE7BCFB2CE1307B5B044MAC=05F1CE30451A03A6E468B3A59033A554KEY=2EC5A074266CD3868F125C40A85C51D2Kx=D5A7EBFC1FA31D74ADA27815426746F8MSG=C3B6AE5BE019MAC=003EB550D462D3E9A2ED9BD4B798C87FKEY=01B823CA9E8EFE175836625AA152E972Kx=A38CD6F22953DB258CB5ABBB508EF884MSG=61MAC=32A2D28599066AA0DDCD1DFB6C3373B0KEY=FC5558E552206A0FF2194552D1CE6B48Kx=7035246DCE824EE244DE68B5BA8C0324MSG=9B5B542E0A39512195ED0EA6A0BCCE71MAC=2797A78D54BE757328F7A00C4B522B2CKEY=B93BDEAD484349154F801B064C5BBB29Kx=A53A9086733E606616E5AB6C956B07CCMSG=B647MAC=0C808D5AE0364B41B122EDB487397BB9KEY=E718EE5C2C37AC31129DD60377CB97AFKx=C1A134D29738702C49E2A03DF3C8E13EMSG=1E4BD43A31MAC=7D45F28E5FAA0C2FA7379A3BBA4B2A6EKEY=E477385CD36D02F3F6945AE61DDDA24FKx=78AC2C1CC2DE88761BDB54687FDE79B1MSG=5D96B808E8C5D7BDC8CD1922FA5234F9B5C9690184D4035571F3613C3A15E25FE2ED87E17F53EAA82A352EC7MAC=B7F4DB09E5C5A9133D60AAFC283D270DKEY=41C4238B6E55539E0B55C089936396F5Kx=5E5CA473E94481320189974EC5108FDANXPSemiconductorsAN12304LeakageResilientPrimitive(LRP)SpecificationAN12304Allinformationprovidedinthisdocumentissubjecttolegaldisclaimers.
NXPB.
V.
2019.
Allrightsreserved.
ApplicationnoteRev.
1.
1—13March2019COMPANYPUBLIC46601135/41MSG=MAC=AA7032ED436E7B52808E2E703F8781A1KEY=B2EABA3F0CCB537962DEC1D64EA63B13Kx=17A233E56C5B8C1660D7849D41745971MSG=C243538D2DFD4D1CBCF54490B27BDD878416C01ADCF0C0MAC=0BC42ECAC57934BC09899693664C2FF5KEY=4A7F71E3574FEA248ECC9EF0A667B2DFKx=5D3F47D30189B1EA1502BDA01D0B9D66MSG=7D469C2A5E8C28BA15B308D183080DBB1AF6CDD2D1B6C3148B3620D236F2147F4BD7MAC=82B9D1AF7643DE20A65117D1FBA48C7CKEY=CD38D5B8F8C3C26A7818951E225EA424Kx=7E064526AF6D0804C37BB5D2B5D0DA35MSG=C682889F28MAC=093C98AFB1CA352477A296D97611BC72KEY=6C5683229E8985AC3BD5E661FD0A1066Kx=A1878860BE9382E82E2B55FF12466D17MSG=C1MAC=9F65E3937D6C9140FF9B02857ADAFB5BKEY=2D113F05F079BF06B54D19D0566BE656Kx=E54ABD326A766100B7F7F15407601DB8MSG=CFMAC=25938AC2F0F78B21416D5BA1D3642B63KEY=3E521285C1B089D7083214AA2871E299Kx=C506FC8DC3D9E0179913B9866A3622ADMSG=99472DB3A480E63173D39E9F5DMAC=132A1027AD89A5F26C200966D581554BNXPSemiconductorsAN12304LeakageResilientPrimitive(LRP)SpecificationAN12304Allinformationprovidedinthisdocumentissubjecttolegaldisclaimers.
NXPB.
V.
2019.
Allrightsreserved.
ApplicationnoteRev.
1.
1—13March2019COMPANYPUBLIC46601136/414AbbreviationsTable1.
AbbreviationsAcronymDescriptionAESAdvancedEncryptionStandardCBCCipherBlockChain,onemodeofoperationforblockciphersCMACCipher-basedMessageAuthenticationCodeCTRCounterModeDFADifferentialFaultAnalysisDPADifferentialPowerAnalysisECBElectronicCodeBookModeIVInitializationVectorLRICBLRPIndexedCodeBookmodeLRPLeakageResilientPrimitiveLSBitLeastSignificantBitMACMessageAuthenticationCodeMSBitMostSignificantBitPRGPseudo-RandomGeneratorNXPSemiconductorsAN12304LeakageResilientPrimitive(LRP)SpecificationAN12304Allinformationprovidedinthisdocumentissubjecttolegaldisclaimers.
NXPB.
V.
2019.
Allrightsreserved.
ApplicationnoteRev.
1.
1—13March2019COMPANYPUBLIC46601137/415References1.
MorrisJ.
Dworkin.
SP800-38a2001edition.
recommendationforblockciphermodesofoperation:Methodsandtechniques.
Technicalreport,Gaithersburg,MD,UnitedStates,2001.
2.
OdedGoldreich,ShafiGoldwasser,andSilvioMicali.
Howtoconstructrandomfunctions.
J.
ACM,33(4):792–807,August1986.
3.
JonathanKatzandYehudaLindell.
IntroductiontoModernCryptography,SecondEdition(Chapman&Hall/CrcCryptographyandNetworkSecuritySeries).
Chapan&Hall/CRC,2014.
4.
ISO/IEC9797-1:1999Informationtechnology–Securitytechniques–MessageAuthenticationCodes(MACs)–Part1:Mechanismsusingablockcipher.
NXPSemiconductorsAN12304LeakageResilientPrimitive(LRP)SpecificationAN12304Allinformationprovidedinthisdocumentissubjecttolegaldisclaimers.
NXPB.
V.
2019.
Allrightsreserved.
ApplicationnoteRev.
1.
1—13March2019COMPANYPUBLIC46601138/416Legalinformation6.
1DefinitionsDraft—Thedocumentisadraftversiononly.
Thecontentisstillunderinternalreviewandsubjecttoformalapproval,whichmayresultinmodificationsoradditions.
NXPSemiconductorsdoesnotgiveanyrepresentationsorwarrantiesastotheaccuracyorcompletenessofinformationincludedhereinandshallhavenoliabilityfortheconsequencesofuseofsuchinformation.
6.
2DisclaimersLimitedwarrantyandliability—Informationinthisdocumentisbelievedtobeaccurateandreliable.
However,NXPSemiconductorsdoesnotgiveanyrepresentationsorwarranties,expressedorimplied,astotheaccuracyorcompletenessofsuchinformationandshallhavenoliabilityfortheconsequencesofuseofsuchinformation.
NXPSemiconductorstakesnoresponsibilityforthecontentinthisdocumentifprovidedbyaninformationsourceoutsideofNXPSemiconductors.
InnoeventshallNXPSemiconductorsbeliableforanyindirect,incidental,punitive,specialorconsequentialdamages(including-withoutlimitation-lostprofits,lostsavings,businessinterruption,costsrelatedtotheremovalorreplacementofanyproductsorreworkcharges)whetherornotsuchdamagesarebasedontort(includingnegligence),warranty,breachofcontractoranyotherlegaltheory.
Notwithstandinganydamagesthatcustomermightincurforanyreasonwhatsoever,NXPSemiconductors'aggregateandcumulativeliabilitytowardscustomerfortheproductsdescribedhereinshallbelimitedinaccordancewiththeTermsandconditionsofcommercialsaleofNXPSemiconductors.
Righttomakechanges—NXPSemiconductorsreservestherighttomakechangestoinformationpublishedinthisdocument,includingwithoutlimitationspecificationsandproductdescriptions,atanytimeandwithoutnotice.
Thisdocumentsupersedesandreplacesallinformationsuppliedpriortothepublicationhereof.
Suitabilityforuse—NXPSemiconductorsproductsarenotdesigned,authorizedorwarrantedtobesuitableforuseinlifesupport,life-criticalorsafety-criticalsystemsorequipment,norinapplicationswherefailureormalfunctionofanNXPSemiconductorsproductcanreasonablybeexpectedtoresultinpersonalinjury,deathorseverepropertyorenvironmentaldamage.
NXPSemiconductorsanditssuppliersacceptnoliabilityforinclusionand/oruseofNXPSemiconductorsproductsinsuchequipmentorapplicationsandthereforesuchinclusionand/oruseisatthecustomer'sownrisk.
Applications—Applicationsthataredescribedhereinforanyoftheseproductsareforillustrativepurposesonly.
NXPSemiconductorsmakesnorepresentationorwarrantythatsuchapplicationswillbesuitableforthespecifiedusewithoutfurthertestingormodification.
CustomersareresponsibleforthedesignandoperationoftheirapplicationsandproductsusingNXPSemiconductorsproducts,andNXPSemiconductorsacceptsnoliabilityforanyassistancewithapplicationsorcustomerproductdesign.
Itiscustomer'ssoleresponsibilitytodeterminewhethertheNXPSemiconductorsproductissuitableandfitforthecustomer'sapplicationsandproductsplanned,aswellasfortheplannedapplicationanduseofcustomer'sthirdpartycustomer(s).
Customersshouldprovideappropriatedesignandoperatingsafeguardstominimizetherisksassociatedwiththeirapplicationsandproducts.
NXPSemiconductorsdoesnotacceptanyliabilityrelatedtoanydefault,damage,costsorproblemwhichisbasedonanyweaknessordefaultinthecustomer'sapplicationsorproducts,ortheapplicationorusebycustomer'sthirdpartycustomer(s).
Customerisresponsiblefordoingallnecessarytestingforthecustomer'sapplicationsandproductsusingNXPSemiconductorsproductsinordertoavoidadefaultoftheapplicationsandtheproductsoroftheapplicationorusebycustomer'sthirdpartycustomer(s).
NXPdoesnotacceptanyliabilityinthisrespect.
Limitingvalues—Stressaboveoneormorelimitingvalues(asdefinedintheAbsoluteMaximumRatingsSystemofIEC60134)willcausepermanentdamagetothedevice.
Limitingvaluesarestressratingsonlyand(proper)operationofthedeviceattheseoranyotherconditionsabovethosegivenintheRecommendedoperatingconditionssection(ifpresent)ortheCharacteristicssectionsofthisdocumentisnotwarranted.
Constantorrepeatedexposuretolimitingvalueswillpermanentlyandirreversiblyaffectthequalityandreliabilityofthedevice.
Termsandconditionsofcommercialsale—NXPSemiconductorsproductsaresoldsubjecttothegeneraltermsandconditionsofcommercialsale,aspublishedathttp://www.
nxp.
com/profile/terms,unlessotherwiseagreedinavalidwrittenindividualagreement.
Incaseanindividualagreementisconcludedonlythetermsandconditionsoftherespectiveagreementshallapply.
NXPSemiconductorsherebyexpresslyobjectstoapplyingthecustomer'sgeneraltermsandconditionswithregardtothepurchaseofNXPSemiconductorsproductsbycustomer.
Nooffertosellorlicense—Nothinginthisdocumentmaybeinterpretedorconstruedasanoffertosellproductsthatisopenforacceptanceorthegrant,conveyanceorimplicationofanylicenseunderanycopyrights,patentsorotherindustrialorintellectualpropertyrights.
Exportcontrol—Thisdocumentaswellastheitem(s)describedhereinmaybesubjecttoexportcontrolregulations.
Exportmightrequireapriorauthorizationfromcompetentauthorities.
Translations—Anon-English(translated)versionofadocumentisforreferenceonly.
TheEnglishversionshallprevailincaseofanydiscrepancybetweenthetranslatedandEnglishversions.
6.
3TrademarksNotice:Allreferencedbrands,productnames,servicenamesandtrademarksarethepropertyoftheirrespectiveowners.
MIFARE—isatrademarkofNXPB.
V.
DESFire—isatrademarkofNXPB.
V.
NXPSemiconductorsAN12304LeakageResilientPrimitive(LRP)SpecificationAN12304Allinformationprovidedinthisdocumentissubjecttolegaldisclaimers.
NXPB.
V.
2019.
Allrightsreserved.
ApplicationnoteRev.
1.
1—13March2019COMPANYPUBLIC46601139/41TablesTab.
1.
Abbreviations36NXPSemiconductorsAN12304LeakageResilientPrimitive(LRP)SpecificationAN12304Allinformationprovidedinthisdocumentissubjecttolegaldisclaimers.
NXPB.
V.
2019.
Allrightsreserved.
ApplicationnoteRev.
1.
1—13March2019COMPANYPUBLIC46601140/41FiguresFig.
1.
Generationofsecretplaintextsandupdatedkeys4NXPSemiconductorsAN12304LeakageResilientPrimitive(LRP)SpecificationPleasebeawarethatimportantnoticesconcerningthisdocumentandtheproduct(s)describedherein,havebeenincludedinsection'Legalinformation'.
NXPB.
V.
2019.
Allrightsreserved.
Formoreinformation,pleasevisit:http://www.
nxp.
comForsalesofficeaddresses,pleasesendanemailto:salesaddresses@nxp.
comDateofrelease:13March2019Documentidentifier:AN12304Documentnumber:466011Contents1Introduction31.
1Cryptographicsecurity31.
2Organization32Algorithms42.
1Pre-computations42.
1.
1Plaintextandkeygeneration42.
1.
1.
1Algorithm152.
1.
1.
2Algorithm252.
2LRPfunctionevaluation52.
2.
1Algorithm362.
3LRICB62.
3.
1Algorithm472.
3.
2Algorithm582.
4LRP-CMAC82.
4.
1Algorithm693TestVectors103.
1LRPEvalindetail103.
2LRPEval133.
3LRPLRICB193.
4LRPCMAC294Abbreviations365References376Legalinformation38