Lightweight block cipher

A machine-readable non-transitory medium having stored thereon machine-executable instructions for encrypting data with a provided key, the machine-executable instructions for:

• generating a plurality of round keys based on the provided key;
• processing the data in a block cipher process having a plurality of rounds, each round comprising:
• performing a first logical combination of the data with a first key of a next two keys of the plurality of keys;
• first permuting the first logically combined data based on a first defined permutation;
• performing a first substitution on the first permuted data;
• second permuting the first substituted data based on a second defined permutation;
• performing a second logical combination of the second permuted data with a permuted second key of the next two keys, wherein the second key is permuted based on a primary defined permutation;
• and
• performing a second substitution on the second logically combined data,
• wherein the machine-executable instructions further comprise, after a final round of the plurality of rounds, performing a penultimate logical combination of the second substituted data with a penultimate key of the plurality of keys, permuting the penultimate logically combined data based on the primary defined permutation, performing a final substitution of the permuted data, and performing a final logical combination of the final substituted data with a last key of the plurality of keys.

An apparatus comprising:

• a hardware memory configured to store machine-executable instructions for encrypting data with a provided key;
• and
• one or more controllers operatively coupled to the memory and configured to:
• generate a plurality of round keys based on the provided key;
• process the data in a block cipher process having a plurality of rounds, each round comprising:
• perform a first logical combination of the data with a first key of a next two keys of the plurality of keys;
• first permute the first logically combined data based on a first defined permutation;
• perform a first substitution on the first permuted data;
• second permute the first substituted data based on a second defined permutation;
• perform a second logical combination of the second permuted data with a permuted second key of the next two keys, wherein the second key is permuted based on a primary defined permutation;
• and
• perform a second substitution on the second logically combined data, wherein after a final round of the plurality of rounds, the controller is further configured to perform a penultimate logical combination of the second substituted data with a penultimate key of the plurality of keys, permute the penultimate logically combined data based on the primary defined permutation, perform a final substitution of the permuted data, perform a final logical combination of the final substituted data with a last key of the plurality of keys, and output a result as the encrypted data.