ISO/IEC 29192-8:2022

Overview

ISO/IEC 29192-8:2022 - "Information security - Lightweight cryptography - Part 8: Authenticated encryption" specifies a lightweight authenticated encryption method designed for constrained environments. The document defines a single authenticated encryption mechanism based on the Grain-128A stream cipher that provides data confidentiality, data integrity, and optionally data origin authentication. The standard targets applications with tight limits on chip area, energy, execution time, code size, RAM and bandwidth.

Key topics and technical requirements

• Cipher basis: Grain-128A, a synchronous stream cipher combined with an add-on MAC module.
• Key and IV sizes: 128-bit secret key (K) and a 96-bit initialization value (IV).
• MAC parameters: MAC length t (in bits), with t ≥ 32; the MAC applies to the entire plaintext.
• Pre-output splitting: After initialization, the cipher produces a pre-output stream where even bits form the encryption keystream and odd bits feed MAC generation.
• Authenticated message format: The authenticated message (AM) is the concatenation of ciphertext and MAC (AM = C || MAC).
• Operational assumptions: Parties must share K and IV securely prior to use; key management is explicitly out of scope for this document (see ISO/IEC 11770 series for key management techniques).
• Scope limits: Only one authenticated encryption method is specified; future additions (e.g., AEAD variants) may be included later.

Applications and typical users

ISO/IEC 29192-8:2022 is aimed at developers and architects working with resource-constrained devices that still require robust authenticated encryption:

• IoT and embedded device engineers (sensor nodes, actuators)
• RFID and smart card designers requiring lightweight confidentiality and integrity
• Medical device and secure battery manufacturers where power and area are limited
• Security architects specifying protocols for low-resource networks
• Implementers and evaluators looking for a standards-based lightweight AE solution

Use cases include protecting data-in-transit between constrained devices, and lightweight protection of data-at-rest on limited-memory devices.

Related standards

• ISO/IEC 29192 series (lightweight cryptography) - companion parts such as:
  • ISO/IEC 29192-2 (lightweight block ciphers)
  • ISO/IEC 29192-3 (lightweight stream ciphers)
  • ISO/IEC 29192-6 (lightweight MAC algorithms)
• ISO/IEC 11770 (key management techniques) - key management is outside 29192-8’s scope
• ISO/IEC 19772 (authenticated encryption approaches) - for comparison and broader AE methods

ISO/IEC 29192-8:2022 is a practical standard for secure, efficient authenticated encryption in constrained environments, with clear implementation parameters (Grain-128A, 128-bit key, 96-bit IV, MAC t ≥ 32) and guidance on intended use cases.