Romulus Authenticated Encryption / Hash

Home   - -   Specs/Features   - -   Security   - -   Implementations   - -   Contact



Romulus is a submission to the NIST lightweight competition, currently in the final round. You can find the latest v1.3 specifications here (and the previous v1.2 specifications here). You can also check:

Romulus is composed of 4 variants, each using the tweakable block cipher Skinny-128/384+ internally: