This paper presents Gimli, a 384-bit permutation designed to achieve high security with high performance across a broad range of platforms, including 64-bit Intel/AMD server CPUs, 64-bit and 32bit ARM smartphone CPUs, 32-bit ARM microcontrollers, 8-bit AVR microcontrollers, FPGAs, ASICs without side-channel protection, and ASICs with side-channel protection.
Bernstein, D. J., Kölbl, S., Lucks, S., Maat Costa Massolino, P., Mendel, F., Nawaz, K., Schneider, T., Schwabe, P., Standaert, F.-X., & Todo, Y. (2017). Gimli: a cross-platform permutation. Lecture Notes in Computer Science, 10529, 299-320. https://doi.org/10.1007/978-3-319-66787-4_15 (Original work published 2017)