Hawkynt

LOTUS-AEAD

Lightweight OCB-like authenticated encryption using TweGIFT-64 block cipher. NIST Lightweight Cryptography Competition candidate with 128-bit keys and 64-bit tags.

Properties

Property	Value
Category	Authenticated Encryption
Sub-category	Lightweight Cryptography
Security status	🧪 Experimental
Complexity	Advanced
Inventor	Avik Chakraborti, Nilanjan Datta, Ashwin Jha, Cuauhtemoc Mancillas López, Mridul Nandi, Yu Sasaki
Year	2019
Origin	🌐 International
Source	algorithms/aead/lotus-aead.js

Parameters

Parameter	Supported values
Key sizes	16 bytes (128 bits)
Tag sizes	8 bytes (64 bits)

Capabilities

Flag	Value
SupportsDetached	No

Security

Status: 🧪 Experimental

No vulnerabilities are recorded for this implementation.

Documentation

• NIST LWC Submission
• LOTUS-AEAD Specification
• C Reference Implementation

References

• LOTUS-AEAD and LOCUS-AEAD NIST LWC Round 1 Submission Package (Reference C Code)
• LOTUS/LOCUS Official Project Page (ISI Kolkata)

Test vectors

3 vectors ship with this algorithm and run in the test suite. Byte values are hexadecimal.

Vector 1 — LOTUS-AEAD self-generated regression vector: empty message, empty AAD

Field	Value
key	000102030405060708090a0b0c0d0e0f
nonce	000102030405060708090a0b0c0d0e0f
aad	(empty)
input	(empty)
expected	37f3ebb83ff38de8

Vector 2 — LOTUS-AEAD self-generated regression vector: empty message, 1-byte AAD

Field	Value
key	000102030405060708090a0b0c0d0e0f
nonce	000102030405060708090a0b0c0d0e0f
aad	00
input	(empty)
expected	0020cf359fa6ec6e

Vector 3 — LOTUS-AEAD self-generated regression vector: empty message, 2-byte AAD

Field	Value
key	000102030405060708090a0b0c0d0e0f
nonce	000102030405060708090a0b0c0d0e0f
aad	0001
input	(empty)
expected	9531e45beefee95f

---

← All algorithms

This site is open source. Improve this page.