NIST Publish ‘Lightweight Cryptography’ Standard To Protect IoT Devices

The National Institute of Standards and Technology (NIST) has officially released NIST Special Publication 800-232, establishing the Ascon family of algorithms as the new standard for lightweight cryptography designed specifically for resource-constrained devices. 

Published in August 2025, this groundbreaking standard addresses critical security gaps in Internet of Things (IoT) devices, embedded systems, and low-power sensors where traditional cryptographic solutions like AES-GCM may prove too resource-intensive.

Key Takeaways
1. NIST SP 800-232 standardizes the Ascon family—using 320-bit states and Ascon-p/p permutations.
2. Ascon-AEAD128 delivers 128-bit security.
3. Ascon-Hash256, XOF128, and CXOF128 use a 64-bit sponge (Ascon-p) to produce 256-bit or variable-length outputs.

Ascon Algorithm Family Multi-Layered Protection

The newly standardized Ascon family comprises four distinct cryptographic primitives, each serving specific security functions. 

Ascon-AEAD128 serves as the primary authenticated encryption scheme, offering 128-bit security strength in single-key environments with nonce-based operation. 

The standard also includes Ascon-Hash256, a cryptographic hash function producing 256-bit digests with 128-bit security strength.

Two eXtendable Output Functions (XOFs) complete the suite: Ascon-XOF128 and Ascon-CXOF128. 

The latter introduces customization string capabilities, enabling domain separation for applications requiring distinct outputs from identical inputs. 

All algorithms utilize the same underlying Ascon-p permutations with varying round counts, specifically Ascon-p for initialization/finalization and Ascon-p for data processing phases.

The Ascon standard implements a Substitution-Permutation Network (SPN) structure operating on a 320-bit internal state divided into five 64-bit words. 

The permutation function consists of three layers: constant-addition, substitution, and linear diffusion, providing robust cryptographic security while maintaining computational efficiency.

Key technical specifications include a 128-bit rate and 192-bit capacity for Ascon-AEAD128, while hash functions operate with a 64-bit rate and 256-bit capacity. 

The standard mandates specific initial values: 0x00001000808c0001 for Ascon-AEAD128, 0x0000080100cc0002 for Ascon-Hash256, and distinct IVs for XOF variants to ensure algorithm separation.

Enhanced Security Features

NIST’s standard incorporates advanced security measures, including nonce-masking implementation options and truncation capabilities for authentication tags. 

The specification requires a minimum of 32-bit truncated tags, with careful risk analysis mandated for tags shorter than 64 bits. 

Data processing limits are established at 2⁵⁴ bytes per key to maintain security margins. For enhanced protection, the nonce-masking option maintains full 128-bit security regardless of key count. 

This comprehensive approach ensures robust protection against forgery attempts while supporting practical deployment constraints in resource-limited environments.

Find this Story Interesting! Follow us on LinkedIn and X to Get More Instant Updates.