The AEGIS Family Of Authenticated Encryption Algorithms

This is the working area for the individual Internet-Draft, "The AEGIS family of authenticated encryption algorithms".

• Editor's Copy
• Datatracker Page
• Individual Draft
• Compare Editor's Copy to Individual Draft

Known Implementations

Name	Language
This document's reference implementations	Zig
CAESAR reference AEGIS-128L implementations	C
CAESAR reference AEGIS-256 implementations	C
Linux kernel	C
libsodium	C
angt/aegis256	C
TwoEightNine/aegis	C
libaegis	C
aegis-bitsliced	C
google/aegis-cipher	C++
aegis	Rust
raycrypt	Rust
crypto-rust	Rust
Zig standard library	Zig
x13a/py-aegis	Python
ericlagergren/aegis	Go
samuel-lucas6/AEGIS.NET	C#
arc.crypto	C#
aegis-128L	JavaScript
aegis-js	JavaScript
aegis-kotlin	Kotlin
aegis-jasmin	Assembly (Jasmin)
aegis-java	Java
moonbit-aegis	Moonbit
sodium-compat	PHP
aegis-ts	TypeScript
yawning/odin	Odin

Hardware implementations

Name	Language
Athena/AEGIS	RTL VHDL
AEGIS256 UVM Verification	SystemVerilog

AEGIS support in TLS stacks

• Experimental support for BoringSSL
• Experimental support for OpenSSL
• Facebook's Fizz
• PicoTLS
• Zig TLS client

Test vectors

For convenience, test vectors can be downloaded in JSON format from the test-vectors directory.

Project Wycheproof includes additional test vectors:

• for AEGIS-128L
• for AEGIS-256

Project Rooterberg also includes an extensive set of test vectors for AEGIS variants.

Contributing

See the guidelines for contributions.

Contributions can be made by creating pull requests. The GitHub interface supports creating pull requests using the Edit (✏) button.

Command Line Usage

Formatted text and HTML versions of the draft can be built using make.

$ make

Command line usage requires that you have the necessary software installed. See the instructions.