Finalists of the NIST Lightweight Cryptography Standardization Process

[Sonmez Turan, Meltem (Fed)]

Dear forum subscribers,

NIST has completed the review of the second-round candidates. After careful consideration, the ten finalists moving forward to the final round are: ASCON, Elephant, GIFT-COFB, Grain128-AEAD, ISAP, Photon-Beetle, Romulus, Sparkle, TinyJambu, and Xoodyak.

Selecting the finalists was a challenge. In the upcoming weeks, NIST will publish a detailed description of the decision process and rationale for selection.

NIST thanks the designers of the second-round candidates and those who have contributed to the selection process by providing security and performance analysis of the candidates. NIST hopes that the submission teams of candidates that were not selected to advance will continue to participate in the evaluation of the finalists along with the cryptographic community at large.

The final round of the standardization process is expected to last approximately 12 months. NIST will give the finalist submission teams the opportunity to provide updated specifications and implementations. Further guidelines on the tweak proposals will be provided in the upcoming days.

Questions may be directed to lightweig...@nist.gov.

Thanks,

On behalf of the NIST Lightweight Cryptography Team