Side-channel resistant AEAD using Ascon permutation with 12/6/1 round configuration. Designed to protect against power analysis and timing attacks through limited permutation calls per key bit.
| Property | Value |
|---|---|
| Category | Authenticated Encryption |
| Sub-category | Authenticated Encryption |
| Security status | 🛡️ Secure |
| Complexity | Advanced |
| Inventor | Christoph Dobraunig, Maria Eichlseder, Stefan Mangard, Florian Mendel, Robert Primas |
| Year | 2017 |
| Origin | Not specified |
| Source | algorithms/aead/isap.js |
| Parameter | Supported values |
|---|---|
| Key sizes | 16 bytes (128 bits) |
| Tag sizes | 16 bytes (128 bits) |
| Flag | Value |
|---|---|
SupportsDetached |
No |
Status: 🛡️ Secure
No vulnerabilities are recorded for this implementation.
5 vectors ship with this algorithm and run in the test suite. Byte values are hexadecimal.
Vector 1 — ISAP-A-128A: Empty PT, Empty AD (NIST LWC KAT Count=1)
| Field | Value |
|---|---|
key |
000102030405060708090a0b0c0d0e0f |
nonce |
000102030405060708090a0b0c0d0e0f |
associatedData |
(empty) |
input |
(empty) |
expected |
7b94ef35ae55ab272c9c44d6c1cf0102 |
Vector 2 — ISAP-A-128A: Empty PT, 1-byte AD (NIST LWC KAT Count=2)
| Field | Value |
|---|---|
key |
000102030405060708090a0b0c0d0e0f |
nonce |
000102030405060708090a0b0c0d0e0f |
associatedData |
00 |
input |
(empty) |
expected |
40fead6fdf1c2d6d6eae40deddff9f55 |
Vector 3 — ISAP-A-128A: Empty PT, 8-byte AD (NIST LWC KAT Count=9)
| Field | Value |
|---|---|
key |
000102030405060708090a0b0c0d0e0f |
nonce |
000102030405060708090a0b0c0d0e0f |
associatedData |
0001020304050607 |
input |
(empty) |
expected |
7ae5f96bd1ae7f5b08fa85177750b6b3 |
Vector 4 — ISAP-A-128A: 1-byte PT, Empty AD (NIST LWC KAT Count=34)
| Field | Value |
|---|---|
key |
000102030405060708090a0b0c0d0e0f |
nonce |
000102030405060708090a0b0c0d0e0f |
associatedData |
(empty) |
input |
00 |
expected |
2cfacf138c6fdbbcc8763a7205fd66316d |
Vector 5 — ISAP-A-128A: 8-byte PT, 8-byte AD (NIST LWC KAT)
| Field | Value |
|---|---|
key |
000102030405060708090a0b0c0d0e0f |
nonce |
000102030405060708090a0b0c0d0e0f |
associatedData |
0001020304050607 |
input |
0001020304050607 |
expected |
2cde28dbbbd9131e4270dfff9b0c36c0824e86d98daed276 |