Remus

Remus: authenticated encryption with associated data (AEAD) scheme based on a tweakable block cipher (TBC) Skinny. Remus consists of two families, a nonce-based AE (NAE) Remus-N and a nonce misuse-resistant AE (MRAE) Remus-M. Remus aims at lightweight, efficient, and highly-secure NAE and MRAE schemes, based on a TBC. As the underlying TBC, we adopt Skinny proposed at CRYPTO 2016 [3]. The security of this TBC has been extensively studied, and it has attractive implementation characteristics. Remus shares the basic structure with Romulus [17], which is a set of TBC-based modes based on Skinny. Therefore, Remus inherits the overall implementation advantages of Romulus.