January 16, 2019 doc.: IEEE 802.15-02030r0 September, 2004 Project: IEEE P802.15 Working Group for Wireless Personal Area Networks (WPANs) Submission Title: [Computational Complexity of CCM* Mode of Operation] Date Submitted: [September 23, 2004] Source: [René Struik] Company [Certicom Corp.] Address [5520 Explorer Drive, 4th Floor, Mississauga, ON Canada L4W 5L1] Voice:[+1 (905) 501-6083], FAX: [+1 (905) 507-4230], E-Mail:[rstruik@certicom.com] Re: [IEEE submission 15-04-0537-00-004b (CCM* Specification).] Abstract: [This document explains the computational cost of CCM*, in settings relevant for 802.15.4b.] Purpose: [Education of IEEE 802.15.4b audience, promoting sound technical analysis.] Notice: This document has been prepared to assist the IEEE P802.15. It is offered as a basis for discussion and is not binding on the contributing individual(s) or organization(s). The material in this document is subject to change in form and content after further study. The contributor(s) reserve(s) the right to add, amend or withdraw material contained herein. Release: The contributor acknowledges and accepts that this contribution becomes the property of IEEE and may be made publicly available by P802.15. Rene Struik, Certicom Corp. Rene Struik, Certicom Corp.

Computational Complexity of CCM* Mode of Operation September, 2004 Computational Complexity of CCM* Mode of Operation René Struik, Certicom Research Rene Struik, Certicom Corp.

Computational Complexity CCM* Mode Encryption & Authenticity September, 2004 Computational Complexity CCM* Mode Data transport Confidentiality Authenticity Encryption OFF Encryption ON Authenticity OFF - n AES Authenticity ON n+4 AES 2n+4 AES Assumptions: header size: 10-25 bytes; message payload size: n 16-byte blocks Payload size (examples) Encryption only Authenticity Encryption & Authenticity 0 bytes - 4 AES 1 – 16 bytes 1 AES 5 AES 6 AES 17 – 32 bytes 2 AES 8 AES 33 – 48 bytes 3 AES 7 AES 10 AES 49 – 64 bytes 12 AES 65 – 80 bytes 9 AES 14 AES Computational complexity independent of {Low, Medium, High} authenticity level! Rene Struik, Certicom Corp.

Communication Complexity Security Overhead September, 2004 Communication Complexity Security Overhead Data transport Confidentiality Authenticity Encryption OFF Encryption ON OFF (0 bits) 5 bytes per frame (freshness info) Low (32 bits) 9=5+4 bytes Medium (64 bits) 13=5+8 bytes High (128 bits) 21=5+16 bytes Security info overhead: at least 5 bytes per frame, even if authenticity is turned OFF! Note: Figures based on CCM* throughout specs (without optimizations, without taking into account fixed broadcast encryption) Rene Struik, Certicom Corp.

Implementation Cost AES-128 Block Cipher (in Encryption Mode) September, 2004 Implementation Cost AES-128 Block Cipher (in Encryption Mode) Block cipher AES-128 Software only Hardware only Code size 800 – 2,300 bytes1 Gate count 6 – 7,000 gates RAM size 60 bytes Typical throughput: Intel 8051 processor, 4 MHz: 10 kbps (source: Rijndael specification, Table 3) Motorola 68HC08, 4 MHz: 60 kbps (source: Rijndael specification, Table 4) Rene Struik, Certicom Corp.