StriBob: authenticated encryption from GOST R 34.11-2012 LPS permutation

Authenticated encryption algorithms protect both the confidentiality and integrity of messages in a single processing pass. We show how to utilize the $L\circ P\circ S$ transform of the Russian GOST R 34.11-2012 standard hash “Streebog” to construct an efficient, lightweight algorithm for Authenticated Encryption with Associated Data (AEAD) via the Sponge scheme. The proposed algorithm “StriBob” has attractive security properties, is faster than the Streebog hash alone, twice as fast as the GOST 28147-89 encryption algorithm, and requires only a modest amount of running-time memory. StriBob is a Round 1 candidate in the CAESAR competition.