Ascon v1.2: Lightweight Authenticated Encryption and Hashing

Authenticated encryption satisfies the basic need for authenticity and confidentiality in our information infrastructure. In this paper, we provide the specification of Ascon-128 and Ascon-128a. Both authenticated encryption algorithms provide efficient authenticated encryption on resource-constrained devices and on high-end CPUs. Furthermore, they have been selected as the “primary choice” for lightweight authenticated encryption in the final portfolio of the CAESAR competition. In addition, we specify the hash function Ascon-Hash, and the extendable output function Ascon-Xof. Moreover, we complement the specification by providing a detailed overview of existing cryptanalysis and implementation results.

• Publication year

  2021

• Venue

  Journal of Cryptology

• Publication date

  2021-06-22

• Fields of study

  Computer Science

• Identifiers
  DOI 10.1007/s00145-021-09398-9
• External record

  Open on Semantic Scholar

• Source metadata

  Semantic Scholar

• No claims are published for this paper.

• No concepts are published for this paper.

• Towards Low-Energy Leakage-Resistant Authenticated Encryption from the Duplex Sponge Construction

  2020cited by this paper
• SCARL: Side-Channel Analysis with Reinforcement Learning on the Ascon Authenticated Cipher

  2020cited by this paper
• Tornado: Automatic Generation of Probing-Secure Masked Bitsliced Implementations

  2020cited by this paper
• Mode-Level vs. Implementation-Level Physical Security in Symmetric Cryptography: A Practical Guide Through the Leakage-Resistance Jungle

  2020cited by this paper
• Looking at the NIST Lightweight Candidates from a Masking Point-of-View

  2020cited by this paper
• Protecting against Statistical Ineffective Fault Attacks

  2020influential reference
• Distinguishers for Reduced Round Ascon, DryGASCON, and Shamash Permutations

  2019cited by this paper
• New zero-sum distinguishers on full 24-round Keccak-f using the division property

  2019cited by this paper
• Hardware Implementations of NIST Lightweight Cryptographic Candidates: A First Look

  2019cited by this paper
• A Statistical Fault Analysis Methodology for the Ascon Authenticated Cipher

  2019cited by this paper
• Collision Attacks on Round-Reduced Gimli-Hash/Ascon-Xof/Ascon-Hash

  2019influential reference
• FIMA: Fault Intensity Map Analysis

  2019cited by this paper
• DLCT: A New Tool for Differential-Linear Cryptanalysis

  2019cited by this paper
• ASIC and FPGA Comparative Study for IoT Lightweight Hardware Security Algorithms

  2019cited by this paper
• FELICS-AEAD: Benchmarking of Lightweight Authenticated Encryption Algorithms

  2019cited by this paper
• A Comprehensive Framework for Fair and Eÿcient Benchmarking of Hardware Implementations of Lightweight Cryptography

  2019cited by this paper
• The CAESAR-API in the real world — Towards a fair evaluation of hardware CAESAR candidates

  2018influential reference
• Searching for Subspace Trails and Truncated Differentials

  2018cited by this paper
• A unified masking approach

  2018cited by this paper
• Generic Low-Latency Masking in Hardware

  2018cited by this paper
• Comparison of cost of protection against differential power analysis of selected authenticated ciphers

  2018cited by this paper
• Can Caesar Beat Galois? - Robustness of CAESAR Candidates Against Nonce Reusing and High Data Complexity Attacks

  2018cited by this paper
• Improved Lightweight Implementations of CAESAR Authenticated Ciphers

  2018cited by this paper
• Masking the Lightweight Authenticated Ciphers ACORN and Ascon in Software

  2018cited by this paper
• The design of Xoodoo and Xoofff

  2018cited by this paper
• Evaluation of the CAESAR hardware API for lightweight implementations

  2017influential reference
• Conditional Cube Attack on Round-Reduced ASCON

  2017influential reference
• Reforgeability of Authenticated Encryption Schemes

  2017cited by this paper
• RTL implementations and FPGA benchmarking of selected CAESAR Round Two authenticated ciphers

  2017cited by this paper
• Cryptanalysis of round-reduced ASCON

  2017cited by this paper
• DPA on hardware implementations of Ascon and Keyak

  2017cited by this paper
• Reconciling d+1 Masking in Hardware and Software

  2017influential reference
• Ascon hardware implementations and side-channel evaluation

  2017cited by this paper
• Full-State Keyed Duplex with Built-In Multi-user Support

  2017influential reference
• On the division property of S-boxes

  2016cited by this paper
• Software Benchmarking of the 2nd round CAESAR Candidates

  2016influential reference
• Truncated, Impossible, and Improbable Differential Analysis of ASCON

  2016cited by this paper
• Domain-Oriented Masking: Compact Masked Hardware Implementations with Arbitrary Protection Order

  2016cited by this paper
• SAT-based Cryptanalysis of Authenticated Ciphers from the CAESAR Competition

  2016influential reference
• Comparing Sboxes of ciphers from the perspective of side-channel attacks

  2016cited by this paper
• Optimizing S-Box Implementations for Several Criteria Using SAT Solvers

  2016cited by this paper
• CAESAR Hardware API

  2016influential reference
• Heuristic Tool for Linear Cryptanalysis with Applications to CAESAR Candidates

  2015influential reference
• Cryptanalysis of Ascon

  2015influential reference
• How to Incorporate Associated Data in Sponge-Based Authenticated Encryption

  2015cited by this paper
• sp-AELM: Sponge Based Authenticated Encryption Scheme for Memory Constrained Devices

  2015cited by this paper
• Suit up! -- Made-to-Measure Hardware Implementations of ASCON

  2015cited by this paper
• Security of Keyed Sponge Constructions Using a Modular Proof Approach

  2015cited by this paper
• Structural Evaluation by Generalized Integral Property

  2015influential reference
• The BRUTUS automatic cryptanalytic framework

  2015cited by this paper
• Beyond 2c/2 Security in Sponge-Based Authenticated Encryption Modes

  2014cited by this paper
• Submission to the CAESAR Competition

  2014cited by this paper
• Fides: Lightweight Authenticated Cipher with Side-Channel Resistance for Constrained Hardware

  2013cited by this paper
• Linear hulls with correlation zero and linear cryptanalysis of block ciphers

  2012cited by this paper
• Permutation-based encryption , authentication and authenticated encryption

  2012cited by this paper
• Duplexing the sponge: single-pass authenticated encryption and other applications

  2011cited by this paper
• Higher-Order Differential Properties of Keccak and Luffa

  2011cited by this paper
• On the security of the keyed sponge construction

  2011cited by this paper
• Secure Hardware Implementation of Nonlinear Functions in the Presence of Glitches

  2011cited by this paper
• ATHENa - Automated Tool for Hardware EvaluatioN: Toward Fair and Comprehensive Benchmarking of Cryptographic Hardware Using FPGAs

  2010cited by this paper
• Sponge-Based Pseudo-Random Number Generators

  2010cited by this paper
• A zero-sum property for the KECCAK-f permutation with 18 rounds

  2010cited by this paper
• The Hash Function Hamsi

  2008cited by this paper
• On the Indifferentiability of the Sponge Construction

  2008cited by this paper
• Sponge Functions

  2007influential reference
• National Institute of Standards and Technologyにおける超伝導研究及び生活

  2001cited by this paper
• Towards Sound Approaches to Counteract Power-Analysis Attacks

  1999cited by this paper
• DES and Differential Power Analysis (The "Duplication" Method)

  1999cited by this paper
• Quantum cryptanalysis of hash and claw-free functions

  1997cited by this paper
• A fast quantum mechanical algorithm for database search

  1996cited by this paper
• Cipher and hash function design strategies based on linear and differential cryptanalysis

  1995cited by this paper
• UvA-DARE (Digital Academic Repository) Post-quantum security of the sponge construction Post-quantum security of the sponge construction

  year unknowncited by this paper

• Trustworthiness in Resource-Constrained IoT: Review and Taxonomy of Privacy-Enhancing Technologies and Anomaly Detection

  2026cites this paper
• Research on constructing integral distinguishers for block ciphers via the division property

  2026cites this paper
• Identification Techniques in the Internet of Things: Survey, Taxonomy and Research Frontier

  2026cites this paper
• Low-Latency Implementation of Bitsliced SPN-Cipher on IoT Processors

  2026cites this paper
• Developing a Secure Cyberphysical System for Altitude Chambers

  2026cites this paper
• MALeak: Blind Side-Channel Key Recovery Exploiting Modular Addition Leakage in ARX-based Block Ciphers

  2026cites this paper
• Concretely Efficient Blind Signatures Based on VOLE-in-the-Head Proofs and the MAYO Trapdoor

  2026cites this paper
• Architecting Trust: A Framework for Secure IoT Systems Through Trusted Execution and Semantic Middleware

  2026cites this paper
• Improved preimage attacks on Ascon-XOF based on linearization technique

  2026cites this paper
• Construction of Lightweight S-Boxes With Low Boomerang Uniformity

  2026cites this paper
• Root-Cause Analysis of Power Side-Channel Leaks in RISC-V Cryptographic Implementations

  2026cites this paper
• Neural cryptography: Synergy and conflict between neural networks and cryptographic systems

  2026cites this paper
• Low-Latency Low-Randomness OPINI Gadgets and Their Formal Verification

  2026cites this paper
• A Novel Stateful Authentication Framework Approach With LLM-Based IDS for MQTT Security

  2026influential citation
• Securing DNN Acceleration From Off-Chip Memory Vulnerabilities With Low-Overhead Authenticated Encryption

  2026influential citation
• The Motte-and-Bailey Framework for Leakage-Resilient Accordion Modes: Featuring Qaitbay and Alicante

  2026cites this paper
• An Automated Synthesis Framework for Benchmarking Quantum Resource Costs of Symmetric-Key Cryptography

  2026cites this paper
• TinyTwinGuard: a lightweight authentication scheme for digital twin edge networks using TinyJAMBU

  2026influential citation
• Research on Encryption and Decryption Technology of Microservice Communication Based on Block Cipher

  2026cites this paper
• Strengthening the KLEIN Cipher

  2026cites this paper
• A New Tool to Find Lightweight (And, Xor) Implementations of Quadratic Vectorial Boolean Functions up to Dimension 9

  2026cites this paper
• Algebraic Linked Fault Analysis on PHOTON-Beetle AEAD

  2026cites this paper
• Performance Evaluation of DNA-Based Cryptographic Algorithms on Constrained IoT Devices

  2026cites this paper
• ILAD: A hardware-efficient authenticated encryption scheme for VANET applications based on Ascon

  2026cites this paper
• A Lightweight Layered Security Scheme for Secure RSSI-Based Indoor Localization

  2026cites this paper
• Modified Ascon for improved healthcare data security with quantum key distribution

  2026cites this paper
• Cube-Attack-Like Cryptanalysis of Keccak-Based Constructions Exploiting State Differences (Full Version)

  2025cites this paper
• Data Communication Security for FANETs Using Ascon Lightweight Cryptography

  2025cites this paper
• A Severe Vulnerability and an Effective Defense Against DFA on Ascon

  2025cites this paper
• AmphiKey: A Dual-Mode Secure Authenticated Key Encapsulation Protocol for Smart Grid

  2025cites this paper
• A Forward-Secure Symmetric Authenticated Key Exchange Scheme With Privacy Preservation for Internet of Things Applications

  2025cites this paper
• CHIMERA: Cryptographic Hardware for Integrated Multipurpose Engine on RISC-V with ASCON

  2025influential citation
• Lightweight Hash Function Design for the Internet of Things: Structure and SAT-Based Cryptanalysis

  2025cites this paper
• A Comparative Analysis of Lightweight Hash Functions Using AVR ATXMega128 and ChipWhisperer

  2025cites this paper
• Evaluation of randomness hash-DRBG-based Ascon hash function using NIST SP800-22

  2025cites this paper
• Development of a Lightweight Secure Communication System for UAVs Enhanced by an Unconventional Chaotic Communication Architecture

  2025cites this paper
• Software Benchmarking of NIST Lightweight Hash Function Finalists on Resource-Constrained AVR Platform via ChipWhisperer

  2025influential citation
• Post-Quantum Security of Keyed Sponge-Based Constructions through a Modular Approach

  2025influential citation
• Preimage-type Attacks for Reduced Ascon-Hash: Application to Ed25519

  2025cites this paper
• Statistical Fault Attacks on ASCON Using Improved Square Euclidean Imbalance

  2025cites this paper
• Quantum Implementation of MD5

  2025cites this paper
• Permutation-Based Hashing with Stronger (Second) Preimage Resistance - Application to Hash-Based Signature Schemes

  2025cites this paper
• A Survey on the Implementations, Attacks, and Countermeasures of the NIST Lightweight Cryptography Standard: ASCON

  2025influential citation
• DEBPIR: enhancing information privacy in decentralized business modeling

  2025cites this paper
• Standing Firm in 5G: A Single-Round, Dropout-Resilient Secure Aggregation for Federated Learning

  2025cites this paper
• Primitive-Level vs. Implementation-Level DPA Security: a Certified Case Study (Pleading for Standardized Leakage-Resilient Cryptography)

  2025cites this paper
• Shaking up authenticated encryption

  2025cites this paper
• Optimized and Reconfigurable Hardware Design for ASCON AEAD and Hash Standards

  2025influential citation
• Empirical Evaluation of Memory-Erasure Protocols

  2025cites this paper
• Security Analysis of the Lightweight Cryptographic Algorithm Sycon for IoT Devices

  2025cites this paper
• A Secure Authentication Framework for Consumer Mobile Crowdsourcing Networks

  2025cites this paper
• The Decomposition of Cascade Connections of NFSRs: Old and New Results

  2025cites this paper
• Implementation of the Ascon Encryption Algorithm for Secure Industrial IoT Networks

  2025cites this paper
• State of the Art in Smart Metering Infrastructure Security: A Keyword Co-Occurrence Analysis

  2025cites this paper
• Differential Power Analysis on Low-Energy Keystream Generating Hardware: Full-State Recovery in Dizy Implementation

  2025cites this paper
• MacaKey: Full-State Keyed Sponge Meets the Summation-Truncation Hybrid

  2025cites this paper
• Cryptography-Based Secure Underwater Acoustic Communication for UUVs: A Review

  2025cites this paper
• LLBC: A Novel Feistel-Based Low-Latency Block Cipher for IoT Applications

  2025cites this paper
• Enhancing the MILP/MIQCP-Based Automatic Search for Differential-Linear Distinguishers of IoT-Friendly Block Ciphers Simon and Simeck

  2025cites this paper
• Assessing Gaston: Side-channel Security and Hardware Cost Comparison with Ascon-p

  2025cites this paper
• MDS Diffusion Layers for Arithmetization-Oriented Symmetric Ciphers: The Rotational-Add Construction

  2025cites this paper
• Hardware Acceleration for Post-Quantum Cryptography in Resource Constrained Embedded Systems with RISC-V ISEs

  2025cites this paper
• A Lightweight Encryption Method for IoT-Based Healthcare Applications: A Review and Future Prospects

  2025cites this paper
• Enhancing Cryptographic Solutions for Resource-Constrained RFID Assistive Devices: Implementing a Resource-Efficient Field Montgomery Multiplier

  2025cites this paper
• Decentralized Blockchain-Based Authentication and Interplanetary File System-Based Data Management Protocol for Internet of Things Using Ascon

  2025cites this paper
• The Quest for Efficient ASCON Implementations: A Comprehensive Review of Implementation Strategies and Challenges

  2025cites this paper
• Study About the Performance of Ascon in Arduino Devices

  2025cites this paper
• Algebraic Side-Channel Attacks against ISAP's Re-Keying: one Ascon Round May not be Enough for Serial Implementations

  2025cites this paper
• Improved Key Recovery Attacks of Ascon

  2025cites this paper
• Multiple Rows Mixers and Hsilu A Family of Linear Layers and a Permutation with Fewer XORs

  2025cites this paper
• A Survey of Hardware-Based AES SBoxes: Area, Performance, and Security

  2025cites this paper
• Stateless Hash-Based Signatures for Post-Quantum Security Keys

  2025cites this paper
• New models for the cryptanalysis of ASCON

  2025cites this paper
• Security of the Ascon Authenticated Encryption Mode in the Presence of Quantum Adversaries

  2025cites this paper
• ASCON-Based Mutual Authentication and Secure Surveillance Video Data Management in Smart Cities Using Blockchain

  2025cites this paper
• On the bijectivity of the map χ\documentclass[12pt]{minimal} \usepackage{amsmath} \usepackage{wasysym} \usepackage{amsfonts} \usepackage{amssymb} \usepackage{amsbsy} \usepackage{mathrsfs} \usepackage{upgreek} \setlength{\oddsidemargin}{-69pt} \begin{document}$$\chi $$\end{document}

  2025cites this paper
• HiAE: A High-Throughput Authenticated Encryption Algorithm for Cross-Platform Efficiency

  2025cites this paper
• A 10-bit S-box generated by Feistel construction from cellular automata

  2025cites this paper
• Enhancing Blockchain Security and Decentralization Using the ASCON Algorithm for Lightweight Applications

  2025cites this paper
• Analysis of Light-Weight Cryptography Algorithms for UAV-Networks

  2025cites this paper
• Combined Masking and Shuffling for Side-Channel Secure Ascon on RISC-V

  2025cites this paper
• Practical Persistent Fault Attacks on AES with Instruction Skip

  2025cites this paper
• Parallel implementation of OCB using VAES and GPUs

  2025cites this paper
• Differential properties of LRX-analogues of small constant multiplication

  2025cites this paper
• A Hierarchical Encrypted Compression Scheme for Intra-Vehicle Network

  2025cites this paper
• Data Encryption Algorithms and Risk Management

  2025cites this paper
• Quantum Analysis of Trivium

  2025cites this paper
• Efficient Full-Stack Private Federated Deep Learning With Post-Quantum Security

  2025cites this paper
• Review of Lightweight Cryptographic Algorithm: NIST Requirement and Practical Implementation

  2025cites this paper
• Designing a General-Purpose 8-bit (T)FHE Processor Abstraction

  2025cites this paper
• A 54μW Design-Agnostic Clock, Voltage, and EM-Pulse Fault-Injection Attack Detection Using Time-to-Voltage Conversion

  2025cites this paper
• MILP-based automatic search algorithms for differential-linear distinguishers

  2025cites this paper
• IP Masking with Generic Security Guarantees Under Minimum Assumptions, and Applications

  2025cites this paper
• A secure and resource-efficient authenticated key agreement framework for mobile edge computing

  2025cites this paper
• Differential-Linear Cryptanalysis from an Algebraic Perspective

  2025cites this paper
• A Nonlinear Stream Cipher for Encryption of Test Patterns in Streaming Scan Networks

  2025cites this paper
• Revisiting Leakage-Resilient MACs and Succinctly-Committing AEAD: More Applications of Pseudo-Random Injections

  2025cites this paper
• Masking Based Protection Mechanism for Ascon against CPA Attack

  2025cites this paper
• Correlation Power Analysis on Ascon with Multi-Bit Selection Function

  2025cites this paper
• Preimage and collision attacks on reduced Ascon using algebraic strategies

  2025cites this paper