Table 2.10
Lightweight authenticated encryption schemes (characteristics)
Name
Ref
Type
Key (bits)
Nonce (bits)
IS (bits)
Block/rate (bits)
Tag (bits) Techno. (µm) No. of GEs
ACORN v3 a
[581]
SC (LFSR)
128
128
293
1
128
−
−
ALE
[103]
SC (AES, LEX leak)
128
128
256
128
128
0.065
2700
APE
[22]
Sponge (different hash f.)
e.g., PHOTON-196
160 d
36n d
(opt.)
196 d
36 d
160 d
0.18
1634 d
ASC-1
[300]
SC (AES, LEX leak CFB-like
mode)
256
56
512
128
128
0.065
4964 [103]
Ascon a
[186]
Sponge (SPN)
96/128
96/128
320
64 (128 for
Ascon-128a)
96/128
0.009
2570 (7970)
Ascon-128 [245]
(SCA-protected)
C-QUARK
[36]
Sponge (LFSR, NFSR)
256
64
384
64
≥ 64
0.09
4000
FIDES
[87]
Sponge (AES-like, 16
rounds)
80/96
80/96
160/192
10/12
80/96
0.09
793−2876/
1001−4792
Hummingbird-2 [200]
Hybrid (SPN)
128
64
128
16
128
0.13
2159-3220
Helix
[215]
SC (ARX)
256
128
160
32
128
−
−
Joltik b
[304]
tweakable BC (Joltik-BC)
64/80/96/ 128+64/48/96/64
tweak
32/24/48/32
64
64
64
−
2100/2100/
2600/2600
(estimated)
KETJE a
[82]
Sponge (Keccak-f)
k≤ 182/ k≤ 382
182-|k|/ 382-|k|
200/400
16/32
64
−
−
LAC c
[596]
SC (LBlock-s, LEX leak)
64
80
144
48
64
−
1300 (estimated)
(continued)