Home - - Specs/Features - - Security - - Implementations - - Contact
Romulus is a submission to the NIST lightweight competition, currently in the final round. You can find the latest v1.3 specifications here (and the previous v1.2 specifications here). You can also check:
- our NIST LWC Worksop 2022 slides
- our Transactions on Symmetric-key Cryptology 2020 paper and corresponding talk at FSE 2020
- our NIST LWC Worksop 2020 paper and slides
- our NIST LWC Worksop 2019 paper and slides
- (NEW) The third-party security analysis of the Romulus-N and Romulus-M operating modes by Jooyoung Lee (see document here)
- (NEW) A new security proof for the MDPH mode used in Romulus-H (ePrint and IET Info Sec)
- (NEW) A security proof for the Romulus-T mode (see document here)
Romulus is composed of 4 variants, each using the tweakable block cipher Skinny-128/384+ internally:
- Romulus-N, a nonce-based AEAD (NAE)
- Romulus-M, a nonce misuse-resistant AEAD (MRAE)
- Romulus-T, a leakage-resilient AEAD
- Romulus-H, a hash function