Why is there so little response (e.g. implementation in crypto libraries, programs...) after the end of the CAESAR competition? As far as I can see, there is no shift from AES-GCM to any of the CAESAR algorithms. The response to the Password Hashing Competition, for example, was greater, at least in my perception. Is there a reason for that?


CAESAR competition did not result in any standard.

I think it is because AES-GCM is already widely adopted (with hardware support, although some CAESAR algorithms also use AES) and CAESAR didn't bring anything significantly new. For example OCB was known before, but it is not widely adopted because it is patented (seems like patents have expired now). I guess CAESAR was too late for industry. There is no compelling reason to shift from AES-GCM.

Possibly Ascon and ACORN are being adopted, but we don't know as they are embedded in small devices. Ascon is also one of NIST lightweight finalists.

Password Hashing Competition did bring more as we only had PBKDF, bcrypt, scrypt.

  • $\begingroup$ OCB is no longer patented. I expect adoption to increase. $\endgroup$ Oct 12 at 13:43
  • $\begingroup$ @SAIPeregrinus I believe it is still patented, but usage is free for most use cases. See cs.ucdavis.edu/~rogaway/ocb/license.htm $\endgroup$
    – LightBit
    Oct 12 at 14:55
  • 2
    $\begingroup$ Also there are some pretty cheap hardware crypto accelerators that already supported AES-GCM (I've used Microchip's ATECC608B), and larger CPUs have AES acceleration instructions. Changing hardware designs is expensive. $\endgroup$ Oct 12 at 15:00
  • 1
    $\begingroup$ Rogaway allowed the patents to expire deliberately (didn't pay the renewal fees), and didn't update that page. US7949129B2 & US8321675B2 are the patents. Both are expired. $\endgroup$ Oct 12 at 15:04
  • 1
    $\begingroup$ The Adjusted Expiration is when it would have expired had the fees been paid. :lawyers: $\endgroup$ Oct 13 at 0:09

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.