| CARVIEW |
Select Language
HTTP/2 301
server: GitHub.com
content-type: text/html
location: https://romulusae.github.io/romulus/
x-github-request-id: 0DDD:15317B:6C457D:78B25C:694FF24E
accept-ranges: bytes
age: 0
date: Sat, 27 Dec 2025 14:50:54 GMT
via: 1.1 varnish
x-served-by: cache-bom-vanm7210052-BOM
x-cache: MISS
x-cache-hits: 0
x-timer: S1766847055.770597,VS0,VE198
vary: Accept-Encoding
x-fastly-request-id: baac3340a470df682c09aa4f96dff3072ccc23f3
content-length: 162
HTTP/2 200
server: GitHub.com
content-type: text/html; charset=utf-8
last-modified: Tue, 20 Sep 2022 04:45:12 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: W/"63294558-1545"
expires: Sat, 27 Dec 2025 15:00:55 GMT
cache-control: max-age=600
content-encoding: gzip
x-proxy-cache: MISS
x-github-request-id: 319F:2D8B9D:6BF10D:785DCE:694FF24C
accept-ranges: bytes
age: 0
date: Sat, 27 Dec 2025 14:50:55 GMT
via: 1.1 varnish
x-served-by: cache-bom-vanm7210052-BOM
x-cache: MISS
x-cache-hits: 0
x-timer: S1766847055.982713,VS0,VE211
vary: Accept-Encoding
x-fastly-request-id: 94eb398a10ad00a912459f34298821e4ec00a8c9
content-length: 1903
Romulus Authenticated Encryption / Hash | Romulus Authenticated Encryption / Hash
Romulus Authenticated Encryption / Hash
Home - - Specs/Features - - Security - - Implementations - - Contact
Romulus is a submission to the NIST lightweight competition, currently in the final round. You can find the latest v1.3 specifications here (and the previous v1.2 specifications here). You can also check:
- our NIST LWC Worksop 2022 slides
- our Transactions on Symmetric-key Cryptology 2020 paper and corresponding talk at FSE 2020
- our NIST LWC Worksop 2020 paper and slides
- our NIST LWC Worksop 2019 paper and slides
- (NEW) The third-party security analysis of the Romulus-N and Romulus-M operating modes by Jooyoung Lee (see document here)
- (NEW) A new security proof for the MDPH mode used in Romulus-H (ePrint and IET Info Sec)
- (NEW) A security proof for the Romulus-T mode (see document here)
Romulus is composed of 4 variants, each using the tweakable block cipher Skinny-128/384+ internally:
- Romulus-N, a nonce-based AEAD (NAE)
- Romulus-M, a nonce misuse-resistant AEAD (MRAE)
- Romulus-T, a leakage-resilient AEAD
- Romulus-H, a hash function