simpira384

Simpira384 is an AES-based 384 bit permutation, intended to be used as
an alternative to Xoodoo[12] or Gimli-24 on platforms with the AES-NI
instruction set.

It is an instantiation of Simpira v2 with b=3.

References:

• Simpira v2 A family of
  efficient permutations using the AES round function (Gueron, Mouha)