CAESAR is the Competition for Authenticated Encryption: Security, Applicability, and Robustness.
We submitted four ciphers to CAESAR: ACORN, AEGIS, MORUS and JAMBU.
AEGIS and MORUS are fast in software; ACORN and JAMBU are for lightweight applications.
ACORN, AEGIS, MORUS requires unique nonce for each message; JAMBU remains reasonably strong when nonce is misused.
Final Portfolio (2019.03.20)
ACORN, AEGIS were selected as winners of the CAESAR competition in March 2019. There are six winners.
Round 4 (2018.03--2019.03)
ACORN, AEGIS, MORUS were selected as finalists of CAESAR competition in March 2018.
- Hongjun Wu. ACORN: A Lightweight Autheticated Cipher. PDF C Codes and Test Vectors
On the Intel Skylake CPUs, the speed of ACORN-128 is around 7 clock cycles/bytes.
On Xilinx FPGA Virtex-7, the performance of ACORN-128 is 3.4 Gbits/s on 499 LUTs; or 11.3 Gbits/s on 979 LUTs.
- Hongjun Wu, Bart Preneel. AEGIS: A Fast Authenticated Encryption Algorithm. PDF C Codes and Test Vectors
On the Intel Haswell CPUs, the speed of AEGIS-128L is around 0.3 clock cycles/bytes.
On Xilinx Virtex-7, the performance of AEGIS-128L is 78.30 Gbits/s on 2424 slices.
- Hongjun Wu, Tao Huang. The Authenticated Cipher MORUS. PDF C Codes and Test Vectors
On the Intel Haswell CPUs, the speed of MORUS is around 0.7 clock cycles/bytes.
On Xilinx Virtex-7, the performance of MORUS-1280-128 is 96 Gbits/s on 3764 LUTs.
Round 3 (2016.08--2018.03)
ACORN, AEGIS, MORUS and JAMBU were selected for the third round of CAESAR competition in August 2016. ACORN and MORUS are tweaked for the third round.
- Hongjun Wu. ACORN: A Lightweight Autheticated Cipher. PDF C CODE DIAC 2016 Presentation
On the Intel Skylake CPUs, the speed of ACORN-128 is around 7 clock cycles/bytes.
On Xilinx FPGA Virtex-7, the performance of ACORN-128 is 3.4 Gbits/s on 499 LUTs; or 11.3 Gbits/s on 979 LUTs.
- Hongjun Wu, Bart Preneel. AEGIS: A Fast Authenticated Encryption Algorithm. PDF C CODE DIAC 2016 Presentation
On the Intel Haswell CPUs, the speed of AEGIS-128L is around 0.3 clock cycles/bytes.
On Xilinx Virtex-7, the performance of AEGIS-128L is 78.30 Gbits/s on 2424 slices.
- Hongjun Wu, Tao Huang. The Authenticated Cipher MORUS. PDF C CODE DIAC 2016 Presentation
On the Intel Haswell CPUs, the speed of MORUS is around 0.7 clock cycles/bytes.
On Xilinx Virtex-7, the performance of MORUS-1280-128 is 96 Gbits/s on 3764 LUTs.
- Hongjun Wu, Tao Huang. The JAMBU Lightweight Authenticated Encryption Mode. PDF C CODE DIAC 2016 Presentation
On the Intel Haswell CPUs, the speed of SIMON-JAMBU-96 is around 75 clock cycles/bytes.
On the Intel Haswell CPUs, the speed of AES-JAMBU-128 is around 10 clock cycles/bytes.
On Xilinx Vertex-7, the performance of SIMON-JAMBU-96 is 0.41 Gbits/s on 375 slices.
Round 2 (2015.07--2016.08)
ACORN, AEGIS, MORUS and JAMBU were selected for the second round of CAESAR competition in July 2015.
In the second round, AEGIS and MORUS remain unchanged; the JAMBU mode remains unchanged; ACORN gets tweaked.
Round 1 (2014.04--2015.07)