Customizable encryption algorithm based on a sponge construction with authenticated and non-authenticated modes of operation

A method for generating encrypted data, comprising:

• combining, by an electronic circuit, a cryptographic key with state initialization bits to generate first combination bits;
• producing a first keystream by performing a permutation function ƒ using the first combination bits as inputs thereto, the permutation function ƒ comprising a round function ƒround that is iterated R times, the round function ƒround consisting of
• (1) a substitution layer in which the first combination bits are substituted with substitute bits,
• (2) a permutation layer in which the substitute bits are re-arranged,
• (3) a mixing layer in which at least two outputs of the permutation layer are combined together, and
• (4) an addition layer in which a constant is added to the output of the mixing laver;
• and
• using, by the electronic circuit, the first keystream to encrypt first data so as to produce first encrypted data;
• wherein the first encrypted data is produced by:
• combining the first keystream with authentication data to generate second combination bits;
• producing a second keystream by performing the permutation function ƒ using the second combination bits as inputs thereto;
• and
• combining the second keystream with message body data so as to produce the first encrypted data.

A system, comprising:

• an electronic circuit
• combining a cryptographic key with state initialization bits to generate first combination bits, the state initialization bits comprising bits b that have been initialized to pre-defined bit values,
• producing a first keystream by performing a permutation function ƒ using the first combination bits as inputs thereto, and
• using the first keystream to encrypt first data so as to produce first encrypted data;
• wherein the permutation function ƒ comprises a round function ƒround that is iterated R times, the round function ƒround consisting of (1) a substitution layer in which the first combination bits are substituted with substitute bits, (2) a permutation layer in which the substitute bits are re-arranged, (3) a mixing layer in which at least two outputs of the permutation layer are combined together, and (4) an addition layer in which a constant is added to the output of the mixing layer.

A system, comprising:

• an electronic circuit
• combining a cryptographic key with state initialization bits to generate first combination bits,
• producing a first keystream by performing a permutation function ƒ using the first combination bits as inputs thereto, and
• using the first keystream to encrypt first data so as to produce first encrypted data;
• wherein the permutation function ƒ comprises a round function ƒround that is iterated R times, the round function ƒround consisting of (1) a substitution layer in which the first combination bits are substituted with substitute bits, (2) a permutation layer in which the substitute bits are re-arranged, (3) a mixing layer in which at least two outputs of the permutation layer are combined together, and (4) an addition layer in which a constant is added to the output of the mixing layer;
• and
• wherein the first encrypted data is produced by:
• combining the first keystream with authentication data to generate second combination bits;
• producing a second keystream by performing the permutation function ƒ using the second combination bits as inputs thereto;
• and
• combining the second keystream with message body data so as to produce the first encrypted data.