Minimalist duplex sponge AEAD construction with 257-bit permutation. NIST LWC Round 2 candidate designed for hardware efficiency.
| Property | Value |
|---|---|
| Category | Authenticated Encryption |
| Sub-category | Lightweight Cryptography |
| Security status | 🧪 Experimental |
| Complexity | Advanced |
| Inventor | Joan Daemen, Pedro Maat Costa Massolino, Yann Rotella |
| Year | 2019 |
| Origin | Not specified |
| Source | algorithms/aead/subterranean.js |
| Parameter | Supported values |
|---|---|
| Key sizes | 16 bytes (128 bits) |
| Tag sizes | 16 bytes (128 bits) |
| Flag | Value |
|---|---|
SupportsDetached |
No |
Status: 🧪 Experimental
No vulnerabilities are recorded for this implementation.
6 vectors ship with this algorithm and run in the test suite. Byte values are hexadecimal.
Vector 1 — Subterranean: Empty message, empty AAD (Count 1)
| Field | Value |
|---|---|
key |
000102030405060708090a0b0c0d0e0f |
nonce |
000102030405060708090a0b0c0d0e0f |
aad |
(empty) |
input |
(empty) |
expected |
119838e888c950cdb651e73e1be37cfb |
Vector 2 — Subterranean: Empty message, 1-byte AAD (Count 2)
| Field | Value |
|---|---|
key |
000102030405060708090a0b0c0d0e0f |
nonce |
000102030405060708090a0b0c0d0e0f |
aad |
00 |
input |
(empty) |
expected |
70ed5336da2ee7a99bae0ce68832fe0e |
Vector 3 — Subterranean: Empty message, 4-byte AAD (Count 5)
| Field | Value |
|---|---|
key |
000102030405060708090a0b0c0d0e0f |
nonce |
000102030405060708090a0b0c0d0e0f |
aad |
00010203 |
input |
(empty) |
expected |
3239852bc3478b82edb25c47f6c13ece |
Vector 4 — Subterranean: 1-byte plaintext, empty AAD (Count 44)
| Field | Value |
|---|---|
key |
000102030405060708090a0b0c0d0e0f |
nonce |
000102030405060708090a0b0c0d0e0f |
aad |
(empty) |
input |
00 |
expected |
5fabceade76378ea5e2f79f0b5417eb3d5 |
Vector 5 — Subterranean: 4-byte plaintext, empty AAD (Count 133)
| Field | Value |
|---|---|
key |
000102030405060708090a0b0c0d0e0f |
nonce |
000102030405060708090a0b0c0d0e0f |
aad |
(empty) |
input |
00010203 |
expected |
5fae2772e4148412d4479a84f6a0b20ec8e4429b |
Vector 6 — Subterranean: 16-byte plaintext, 8-byte AAD (Count 537)
| Field | Value |
|---|---|
key |
000102030405060708090a0b0c0d0e0f |
nonce |
000102030405060708090a0b0c0d0e0f |
aad |
0001020304050607 |
input |
000102030405060708090a0b0c0d0e0f |
expected |
52b608b5e28e649b680c7b9b6c7dacd5c839da24570162f6b6f401ce1ff020d9 |