NORX – Parallel and Scalable Authenticated Encryption

NORX is a parallel and scalable authenticated encryption algorithm and a third-round candidate in the CAESAR competition.

NORX was designed by:

• Jean-Philippe Aumasson (@veorq)
• Philipp Jovanovic (@daeinar)
• Samuel Neves (@sevenps)

NORX is not patented and freely available for all applications. All content on NORX such as its specification and source code is available under the CC0 license.

Specifications

The following versions of the NORX specification are available:

• NORX v3.0
• NORX v2.0
• NORX v1.1
• NORX v1.0

Implementations

The following NORX reference implementations are available:

• NORX software (C)
• NORX hardware (VHDL)

Furthermore, there is a number of community implementations in different languages:

• 2018-01-14: rust-norx (Rust); quininer
• 2017-06-11: plc (Lua); Philippe Leblanc
• 2016-05-23: norx-cryptol (Cryptol); Tim Taubert (@ttaubert)
• 2016-05-11: spark_norx (Ada/Spark); James Humphry
• 2015-06-01: cifra (C); Joseph Birr-Pixton (@jpixton)
• 2015-03-13: norxavr (C/AVR-Assembly); Leon Botros
• 2015-01-05: norx-dart (Dart); Olan ÖK (@olanoek)
• 2015-01-05: norx.js (JavaScript); Nadim Kobeissi (@kaepora)
• 2014-12-04: norx-py (Python2); Philipp Jovanovic (@daeinar)
• 2014-07-07: norx-rust (Rust); Samuel Neves (@sevenps)
• 2014-05-29: norx-go (Go); Philipp Jovanovic (@daeinar)
• 2014-03-27: norxx (C++); Sebastian Gesemann (@EsGeh)
• 2014-03-19: norxpy (Python/Numpy); Michael Samuel (@mik235)

Publications

2018

• Distinguishing Attack on NORX Permutation; Tao Huang, Hongjun Wu; Fast Software Encryption 2018

2017

• Under Pressure: Security of Caesar Candidates beyond their Guarantees; Serge Vaudenay, Damian Vizar; IACR ePrint archive report 2017/1147
• Pipeline Oriented Implementation of NORX for ARM Processors; Luan Cardoso dos Santos, Julio López; SBSeg 2017
• Full-State Keyed Duplex With Built-In Multi-User Support; Joan Daemen, Bart Mennink, Gilles Van Assche; Asiacrypt 2017
• Cryptanalysis of NORX 2.0; Colin Chaigneau, Thomas Fuhr, Henri Gilbert, Jérémy Jean, Jean-René Reinhard; Fast Software Encryption 2017
• Analysis of the NORX Core Permutation; Alex Biryukov, Aleksei Udovenko, Vesselin Velichkov; IACR ePrint archive report 2017/034

2016

• On Linear Properties of G Function in NORX; Wen Cheng, Jie Guan; Journal of Cryptologic Research
• SAT-based Cryptanalysis of Authenticated Ciphers from the CAESAR Competition; Ashutosh Dhar Dwivedi, Milos Kloucek, Pawel Morawiecki, Ivica Nikolic, Josef Pieprzyk, Sebastian Wojtowicz; IACR ePrint archive report 2016/1053
• Cryptanalysis of Reduced NORX; Nasour Bagheri, Tao Huang, Keting Jia, Florian Mendel, Yu Sasaki; Fast Software Encryption 2016

2015

• NORX8 and NORX16: Authenticated Encryption for Low-End Systems; Jean-Philippe Aumasson, Philipp Jovanovic, Samuel Neves; TRUDEVICE workshop 2015
• Higher Order Differential Analysis of NORX; Sourav Das, Subhamoy Maitra, Willi Meier; IACR ePrint archive report 2015/186

2014

• Beyond 2^{c/2} Security in Sponge-Based Authenticated Encryption Modes; Philipp Jovanovic, Atul Luykx, Bart Mennink; ASIACRYPT 2014
• Analysis of NORX: Investigating Differential and Rotational Properties; Jean-Philippe Aumasson, Philipp Jovanovic, Samuel Neves; Latincrypt 2014
• NORX: Parallel and Scalable AEAD; Jean-Philippe Aumasson, Philipp Jovanovic, Samuel Neves; ESORICS 2014

Misc

• Benchmarking Modern Authenticated Encryption on 1€ Devices by Joseph Birr-Pixton; NORX among fastest ciphers on small processors. Benchmarked using the cifra platform.