Status report on the first round of the NIST lightweight cryptography standardization process
Open accessAbstract
Reports on Computer Systems TechnologyThe Information Technology Laboratory (ITL) at the National Institute of Standards and Technology (NIST) promotes the U.S. economy and public welfare by providing technical leadership for the Nation's measurement and standards infrastructure.ITL develops tests, test methods, reference data, proof of concept implementations, and technical analyses to advance the development and productive use of information technology.ITL's responsibilities include the development of management, administrative, technical, and physical standards and guidelines for the cost-effective security and privacy of other than national security-related information in federal information systems.
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Integrity signals
Registry
Cites
Statistics
Claims the paper makes
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
NIST-recommended methods for hashing are SPONGENT, Quark, PHOTON, and Lesamnta-LW, as they all have a small memory footprint and input of just 256 characters.
“The NIST-recommended methods for hashing (as a part of its early initiative on lightweight cryptography [100]) are SPONGENT, Quark, PHOTON, and Lesamnta-LW, as they all have a small memory footprint and input (of just 256 characters).”
From Zero Trust Architecture (ZTA): A Comprehensive Survey (2022) · cites this paper as [100]
The Introduction describes a NIST initiative to select lightweight authenticated-encryption and hashing schemes, supporting the claim's general context. But Table 2 lists first-round candidates rather than recommending the four named methods, and the report gives no shared small-memory-footprint or 256-character input specification for them. (LLM, conf=0.87)
Experimental — accuracy not yet measuredFor constrained devices, lightweight cryptography is highly desirable as indicated in NIST's report.
“For such constrained devices, lightweight cryptography is highly desirable as indicated in NIST's report [100].”
From Zero Trust Architecture (ZTA): A Comprehensive Survey (2022) · cites this paper as [100]
Lesamnta-LW is based on AES, is 5-times faster than SHA-256, and requires a RAM of only 50 bytes on an 8-bit processor.
“Lesamnta-LW is based on AES (with Sbox structure similar to that of AES), and is 5-times faster than SHA-256 and requires a RAM of only 50 bytes on an 8-bit processor.”
From Zero Trust Architecture (ZTA): A Comprehensive Survey (2022) · cites this paper as [100]
The first-round candidate table in the “Fountain, Yarará and Coral” section (p. 5) lists cryptographic designs but does not mention Lesamnta-LW. Searches of our copy for Lesamnta-LW, SHA-256, and the 50-byte RAM figure found no passage addressing its AES-based design, speed, or memory use. (LLM, conf=0.75)
Experimental — accuracy not yet measured
Self-check
Percentages, sums and reported differences re-computed from the paper’s own numbers.
The self-check needs the paper’s full text.
Cites
Report on lightweight cryptography
McKay, K. A., Bassham, L., Turan, M. S., & Mouha, N. (2017) · doi:10.6028/nist.ir.8114 · Cited by 353 · see citing works
Self-citationNaya‐Plasencia, M. (2018) · INRIA a CCSD electronic archive server · Cited by 9 · see citing works
Iterative Differential Characteristic of TRIFLE-BC
Liu, F., & Isobe, T. (2020) · Lecture notes in computer science · doi:10.1007/978-3-030-38471-5_4 · Cited by 5 · see citing works
Forgery Attacks on FlexAE and FlexAEAD
Eichlseder, M., Kales, D., & Schofnegger, M. (2019) · Lecture notes in computer science · doi:10.1007/978-3-030-35199-1_10 · Cited by 4 · see citing works
A Practical Forgery Attack on Lilliput-AE
Dunkelman, O., Keller, N., Lambooij, E., et al. (2019) · Journal of Cryptology · doi:10.1007/s00145-019-09333-z · Cited by 4 · see citing works
Practical Forgery Attacks on Limdolen and HERN.Preprint
Rohit, R. S., & Gong, G. (2019) · IACR Cryptology ePrint Archive · Cited by 2 · see citing works
Flagged first, then by citations
Research works printed but not linked: 1
- [26]26. Mege A (2019) Slide Attack on CLX-128. Accepted to Lightweight Cryptography Workshop 2019.
Cited by
Sorted by citations
Zero Trust Architecture (ZTA): A Comprehensive Survey
Syed, N. F., Shah, S. W., Shaghaghi, A., Anwar, A., Baig, Z., & Doss, R. (2022) · IEEE Access · doi:10.1109/access.2022.3174679 · Cited by 406 · see citing works
“For such constrained devices, lightweight cryptography is highly desirable as indicated in NIST’s report [100].”
BackgroundMethodCube attacks on round-reduced TinyJAMBU
Teng, W. L., Salam, I., Yau, W.-C., Pieprzyk, J., & Phan, R. C.-W. (2022) · Scientific Reports · doi:10.1038/s41598-022-09004-3 · Cited by 15 · see citing works
- Authors
- Turan, M. S., McKay, K. A., Çalık, Ç., Chang, D., & Bassham, L.
- Published
- 2019-10
- OpenAlex
- W2978732305
- Semantic Scholar
- 2017da5c723126799151df3f71ce4e607a1bfa51
- Cited by
- 63
- References
- 6
- Citations by year
- 2026: 5 · 2025: 5 · 2024: 7 · 2023: 8 · 2022: 14 · 2021: 14 · 2020: 10
- Type
- report
- Language
- en
- Open access
- gold
- doi.org
- Funders
- Information Technology Laboratory.
- Topics
- Physical Sciences › Computer Science › Artificial Intelligence › Cryptographic Implementations and Security
- Physical Sciences › Computer Science › Artificial Intelligence › Coding theory and cryptography
- Physical Sciences › Computer Science › Information Systems › Cryptography and Residue Arithmetic
- Keywords
- lightweight cryptography, cryptographic standardization, lightweight block cipher, post-quantum cryptography
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review