We submitted four ciphers to CAESAR: ACORN, AEGIS, MORUS and JAMBU.

AEGIS and MORUS are fast in software; ACORN and JAMBU are for lightweight applications.

ACORN, AEGIS, MORUS requires unique nonce for each message; JAMBU remains reasonably strong when nonce is misused.

- Hongjun Wu. ACORN: A Light Weight Autheticated Cipher. PDF CODE DIAC 2014 Presentation

- Hongjun Wu, Bart Preneel. AEGIS: A Fast Authenticated Encryption Algorithm. PDF CODE DIAC 2014 Presentation

- Hongjun Wu, Tao Huang. The Authenticated Cipher MORUS. PDF CODE DIAC 2014 Presentation

- Hongjun Wu, Tao Huang. JAMBU Lightweight Authenticated Encryption Mode and AES-JAMBU. PDF CODE DIAC 2014 Presentation

In the second round, AEGIS and MORUS remain unchanged; the JAMBU mode remains unchanged; ACORN gets tweaked.

- Hongjun Wu. ACORN: A Lightweight Autheticated Cipher. PDF C CODE VHDL Code DIAC 2015 Presentation

- Hongjun Wu, Bart Preneel. AEGIS: A Fast Authenticated Encryption Algorithm. PDF C CODE VHDL Code DIAC 2015 Presentation

- Hongjun Wu, Tao Huang. The Authenticated Cipher MORUS. PDF C CODE VHDL Code DIAC 2015 Presentation

- Hongjun Wu, Tao Huang. The JAMBU Lightweight Authenticated Encryption Mode. PDF C CODE VHDL Code DIAC 2015 Presentation

- Hongjun Wu. ACORN: A Lightweight Autheticated Cipher. PDF C CODE DIAC 2016 Presentation

On the Intel Skylake CPUs, the speed of ACORN-128 is around 7 clock cycles/bytes.

On Xilinx FPGA Virtex-7, the performance of ACORN-128 is 3.4 Gbits/s on 499 LUTs; or 11.3 Gbits/s on 979 LUTs.

- Hongjun Wu, Bart Preneel. AEGIS: A Fast Authenticated Encryption Algorithm. PDF C CODE DIAC 2016 Presentation

On the Intel Haswell CPUs, the speed of AEGIS-128L is around 0.3 clock cycles/bytes.

On Xilinx Virtex-7, the performance of AEGIS-128L is 78.30 Gbits/s on 2424 slices.

- Hongjun Wu, Tao Huang. The Authenticated Cipher MORUS. PDF C CODE DIAC 2016 Presentation

On the Intel Haswell CPUs, the speed of MORUS is around 0.7 clock cycles/bytes.

On Xilinx Virtex-7, the performance of MORUS-1280-128 is 96 Gbits/s on 3764 LUTs.

- Hongjun Wu, Tao Huang. The JAMBU Lightweight Authenticated Encryption Mode. PDF C CODE DIAC 2016 Presentation

On the Intel Haswell CPUs, the speed of SIMON-JAMBU-96 is around 75 clock cycles/bytes.

On the Intel Haswell CPUs, the speed of AES-JAMBU-128 is around 10 clock cycles/bytes.

On Xilinx Vertex-7, the performance of SIMON-JAMBU-96 is 0.41 Gbits/s on 375 slices.