Adiantum (cipher)
Adiantum is a cipher construction for disk encryption, which uses the ChaCha and Advanced Encryption Standard ciphers, and Poly1305 cryptographic message authentication code.
It was designed in 2018 by Paul Crowley and Eric Biggers at Google specifically for low-powered mobile devices running Android Go. It has been included in the Linux kernel since version 5.0.
HPolyC is an earlier variant of Adiantum, which uses a different construction for the Poly1305 hash function.
Adiantum is implemented in Android 10 as an alternative cipher for device encryption, particularly on low-end devices lacking hardware-accelerated support for AES. The company stated that Adiantum ran five times faster than AES-256-XTS on ARM Cortex-A7 CPUs. Google had previously exempted devices from mandatory device encryption if their specifications affected system performance if enabled. Due to the introduction of Adiantum, device encryption becomes mandatory on all Android devices beginning on Android 10.
