Ascon v1.2: Lightweight Authenticated Encryption and Hashing

TLDR

Authenticated encryption provides essential authenticity and confidentiality for information infrastructure. The paper specifies Ascon‑128 and Ascon‑128a and offers a detailed overview of their cryptanalysis and implementation results. The authors specify the Ascon‑128 and Ascon‑128a authenticated encryption schemes, along with the Ascon‑Hash hash function and Ascon‑Xof extendable output function. Both Ascon‑128 and Ascon‑128a deliver efficient authenticated encryption on constrained devices and high‑end CPUs, were chosen as the primary lightweight authenticated encryption option in the CAESAR competition, and are accompanied by comprehensive cryptanalysis and implementation results.

Abstract

Abstract Authenticated encryption satisfies the basic need for authenticity and confidentiality in our information infrastructure. In this paper, we provide the specification of Ascon -128 and Ascon -128a. Both authenticated encryption algorithms provide efficient authenticated encryption on resource-constrained devices and on high-end CPUs. Furthermore, they have been selected as the “primary choice” for lightweight authenticated encryption in the final portfolio of the CAESAR competition. In addition, we specify the hash function Ascon-Hash , and the extendable output function Ascon-Xof . Moreover, we complement the specification by providing a detailed overview of existing cryptanalysis and implementation results.