Authenticated encryption satisfies the basic need for authenticity and confidentiality in our information infrastructure. In this paper, we provide the specification of Ascon-128 and Ascon-128a. Both authenticated encryption algorithms provide efficient authenticated encryption on resource-constrained devices and on high-end CPUs. Furthermore, they have been selected as the “primary choice” for lightweight authenticated encryption in the final portfolio of the CAESAR competition. In addition, we specify the hash function Ascon-Hash, and the extendable output function Ascon-Xof. Moreover, we complement the specification by providing a detailed overview of existing cryptanalysis and implementation results.

经过身份验证的加密满足了我们信息基础设施中对真实性和机密性的基本需求。在本文中，我们提供了Ascon -128 和Ascon -128a 的规格。两种经过身份验证的加密算法都可以在资源受限的设备和高端 CPU 上提供高效的经过身份验证的加密。此外，在 CAESAR 竞赛的最终组合中，它们被选为轻量级认证加密的“主要选择”。此外，我们指定了哈希函数Ascon-Hash和可扩展的输出函数Ascon-Xof。此外，我们通过提供现有密码分析和实现结果的详细概述来补充规范。