cr.yp.to update

[email protected] 22 Jul 2005 05:59:54 -0000
Newsgroups gmane.comp.djb.announce
Message-ID <[email protected]>
diff -ru .old-crypto/streamciphers.html cr.yp.to/streamciphers.html
--- .old-crypto/streamciphers.html	2005-07-18 15:20:21.000000000 -0400
+++ cr.yp.to/streamciphers.html	2005-07-20 10:21:44.000000000 -0400
@@ -30,15 +30,15 @@
 <tr><th>Name</th><th>Key size</th><th>Authors; policy</th><th>Documents</th></tr>
 <tr><td>ABC</td><td>16 bytes</td><td>Vladimir Anashin, Andrey Bogdanov, Ilya Kizhvatov, Sandeep Kumar</td><td><a href="streamciphers/abc/abc.c">C</a> <a href="streamciphers/abc/desc.pdf">paper</a>; subsequent change in definition</td></tr>
 <tr><td>Achterbahn</td><td>10 bytes</td><td>Berndt Gammel, Rainer Goettfert, Oliver Kniffler</td><td><a href="streamciphers/achterbahn/desc.pdf">paper</a></td></tr>
-<tr><td>DECIM</td><td>10 bytes</td><td>Come Berbain, Olivier Billet, Anne Canteaut, Nicolas Courtois, Blandine Debraize, Henri Gilbert, Louis Goubin, Aline Gouget, Louis Granboulan, Cedric Lauradoux, Marine Minier, Thomas Pornin, Herve Sibert</td><td><a href="streamciphers/decim/desc.pdf">paper</a></td></tr>
+<tr><td>DECIM</td><td>10 bytes</td><td>Come Berbain, Olivier Billet, Anne Canteaut, Nicolas Courtois, Blandine Debraize, Henri Gilbert, Louis Goubin, Aline Gouget, Louis Granboulan, Cedric Lauradoux, Marine Minier, Thomas Pornin, Herve Sibert; <b>patented</b></td><td><a href="streamciphers/decim/desc.pdf">paper</a></td></tr>
 <tr><td>DICING</td><td>16 bytes</td><td>Li An-Ping</td><td><a href="streamciphers/dicing/desc.pdf">paper</a>; subsequent corrections</td></tr>
 <tr><td>Dragon-128</td><td>16 bytes</td><td>Ed Dawson, Kevin Chen, Matt Henricksen, William Millan, Leonie Simpson, HoonJae Lee, SangJae Moon</td><td><a href="streamciphers/dragon-128/dragon-ref.c">C</a> <a href="streamciphers/dragon-128/desc.pdf">paper</a></td></tr>
 <tr><td>Dragon-256</td><td>32 bytes</td><td>Ed Dawson, Kevin Chen, Matt Henricksen, William Millan, Leonie Simpson, HoonJae Lee, SangJae Moon</td><td><a href="streamciphers/dragon-128/dragon-ref.c">C</a> <a href="streamciphers/dragon-128/desc.pdf">paper</a></td></tr>
 <tr><td>Edon80</td><td>10 bytes</td><td>Danilo Gligoroski, Smile Markovski, Ljupco Kocarev, Marjan Gusev</td><td><a href="streamciphers/edon80/PartB1.pdf">desc</a> <a href="streamciphers/edon80/PartB2.pdf">robustness</a> <a href="streamciphers/edon80/PartB3.pdf">security</a> <a href="streamciphers/edon80/PartB4.pdf">advantages</a> <a href="streamciphers/edon80/PartB5.pdf">design</a> <a href="streamciphers/edon80/PartB6.pdf">speed</a> <a href="streamciphers/edon80/PartB7.pdf">impl</a></td></tr>
 <tr><td>F-FCSR-H</td><td>10 bytes</td><td>Thierry Berger, Francois Arnault, Cedric Lauradoux</td><td><a href="streamciphers/f-fcsr-8/B_SPECIF.PDF">paper</a></td></tr>
 <tr><td>F-FCSR-8</td><td>16 bytes</td><td>Thierry Berger, Francois Arnault, Cedric Lauradoux</td><td><a href="streamciphers/f-fcsr-8/B_SPECIF.PDF">paper</a></td></tr>
-<tr><td>Frogbit</td><td>16 bytes</td><td>Thierry Moreau</td><td><a href="streamciphers/frogbit/frogbit.pdf">paper</a></td></tr>
-<tr><td>Fubuki</td><td>16? bytes</td><td>Makoto Matsumoto, Hagita Mariko, Takuji Nishimura, Matsuo Saito</td><td><a href="streamciphers/fubuki/desc.pdf">paper</a></td></tr>
+<tr><td>Frogbit</td><td>16 bytes</td><td>Thierry Moreau; <b>patented</b></td><td><a href="streamciphers/frogbit/frogbit.pdf">paper</a></td></tr>
+<tr><td>Fubuki</td><td>16? bytes</td><td>Makoto Matsumoto, Hagita Mariko, Takuji Nishimura, Matsuo Saito; <b>patented</b></td><td><a href="streamciphers/fubuki/desc.pdf">paper</a></td></tr>
 <tr><td>Grain</td><td>10 bytes</td><td>Martin Hell, Thomas Johansson, Willi Meier</td><td><a href="streamciphers/grain/desc.pdf">paper</a>; subsequent corrections</td></tr>
 <tr><td>HC-256</td><td>32 bytes</td><td>Hongjun Wu; ``HC-256 is not covered by any patent and it is freely available''</td><td><a href="streamciphers/hc-256/desc.pdf">paper</a></td></tr>
 <tr><td>Hermes8-80</td><td>10 bytes</td><td>Ulrich Kaiser</td><td><a href="streamciphers/hermes8-128/desc.pdf">paper</a></td></tr>
@@ -55,7 +55,7 @@
 <tr><td>POMARANCH (CJCSG)</td><td>16 bytes</td><td>Cees Jansen, Tor Helleseth, Alexander Kholosha</td><td><a href="streamciphers/pomaranch/desc.pdf">paper</a></td></tr>
 <tr><td>Py6</td><td>32? bytes</td><td>Eli Biham, Jennifer Seberry; ``No royalty will be necessary for use of Py''</td><td><a href="streamciphers/py6/py6.c">C</a> <a href="streamciphers/py/desc.pdf">paper</a></td></tr>
 <tr><td>Py</td><td>32? bytes</td><td>Eli Biham, Jennifer Seberry; ``No royalty will be necessary for use of Py''</td><td><a href="streamciphers/py/py.c">C</a> <a href="streamciphers/py/desc.pdf">paper</a></td></tr>
-<tr><td>Rabbit</td><td>16 bytes</td><td>Martin Boesgaard, Mette Vesterager, Thomas Christensen, Erik Zenner</td><td><a href="streamciphers/rabbit/rabbit.c">C</a> <a href="streamciphers/rabbit/desc.pdf">paper</a> <a href="http://www.cryptico.com/Default.asp?ID=10">link</a></td>
+<tr><td>Rabbit</td><td>16 bytes</td><td>Martin Boesgaard, Mette Vesterager, Thomas Christensen, Erik Zenner; <b>patented</b></td><td><a href="streamciphers/rabbit/rabbit.c">C</a> <a href="streamciphers/rabbit/desc.pdf">paper</a> <a href="http://www.cryptico.com/Default.asp?ID=10">link</a></td>
 <tr><td>Salsa20 (Snuffle 2005)</td><td>32 bytes</td><td>Daniel J. Bernstein; ``My policy is that Salsa20 is free for everyone to use''</td><td><a href="snuffle/ecrypt.c">C</a> <a href="snuffle/spec.pdf">spec</a> <a href="snuffle/security.pdf">security</a> <a href="snuffle/design.pdf">design</a> <a href="snuffle/speed.pdf">speed</a> <a href="snuffle/robustness.pdf">robustness</a> <a href="snuffle/ip.pdf">IP</a> <a href="snuffle.html">link</a></td></tr>
 <tr><td>Self-Synchronous SOBER (SSS) <b>withdrawn by author</b></td><td>16 bytes</td><td>Gregory Rose, Philip Hawkes, Michael Paddon, Miriam Wiggers de Vries; ``QUALCOMM Incorporated allows free and unrestricted use of any of its intellectual property required to exercise the primitive''</td><td><a href="streamciphers/sss/desc.pdf">paper</a> <a href="http://people.qualcomm.com/ggr/NLS-SSS.html">link</a></td></tr>
 <tr><td>SFINKS</td><td>10 bytes</td><td>An Braeken, Joseph Lano, Nele Mentens, Bart Preneel, Ingrid Verbauwhede</td><td><a href="streamciphers/sfinks/desc.pdf">paper</a></td></tr>
@@ -63,12 +63,12 @@
 <tr><td>TRBDK3 YAEA</td><td></td><td>Timothy Brigham</td><td><a href="streamciphers/trbdk3-yaea/desc.ps">paper</a></td></tr>
 <tr><td>Trivium</td><td>10 bytes</td><td>Christophe De Canniere, Bart Preneel</td><td><a href="streamciphers/trivium/desc.pdf">paper</a></td></tr>
 <tr><td>TSC-3 <b>withdrawn by author</b></td><td>10 bytes</td><td>Jin Hong, Dong Hoon Lee, Yongjin Yeom, Daewan Han, Seongtaek Chee</td><td><a href="streamciphers/tsc-3/desc.pdf">paper</a></td></tr>
-<tr><td>VEST-4</td><td>10 bytes</td><td>Claude Bigeard, Sean O'Neil, Benjamin Gittins, Howard Landman</td><td><a href="streamciphers/vest-16/desc.pdf">paper</a></td></tr>
-<tr><td>VEST-16</td><td>16 bytes</td><td>Claude Bigeard, Sean O'Neil, Benjamin Gittins, Howard Landman</td><td><a href="streamciphers/vest-16/desc.pdf">paper</a></td></tr>
-<tr><td>VEST-32</td><td>32 bytes</td><td>Claude Bigeard, Sean O'Neil, Benjamin Gittins, Howard Landman</td><td><a href="streamciphers/vest-16/desc.pdf">paper</a></td></tr>
+<tr><td>VEST-4</td><td>10 bytes</td><td>Claude Bigeard, Sean O'Neil, Benjamin Gittins, Howard Landman; <b>patented</b></td><td><a href="streamciphers/vest-16/desc.pdf">paper</a></td></tr>
+<tr><td>VEST-16</td><td>16 bytes</td><td>Claude Bigeard, Sean O'Neil, Benjamin Gittins, Howard Landman; <b>patented</b></td><td><a href="streamciphers/vest-16/desc.pdf">paper</a></td></tr>
+<tr><td>VEST-32</td><td>32 bytes</td><td>Claude Bigeard, Sean O'Neil, Benjamin Gittins, Howard Landman; <b>patented</b></td><td><a href="streamciphers/vest-16/desc.pdf">paper</a></td></tr>
 <tr><td>WG</td><td>16 bytes</td><td>Guang Gong, Yassir Nawaz</td><td><a href="streamciphers/wg/desc.pdf">paper</a>; subsequent corrections; subsequent asm; subsequent change in definition (slower setup) in response to attack</td></tr>
 <tr><td>YAMB</td><td>32 bytes</td><td>Anatoly N. Lebedev, Alexander Ivanov, Sergey Starodubtzev, Alexey Kolchkov</td><td><a href="streamciphers/yamb/yamb.c">C</a> <a href="streamciphers/yamb/desc.pdf">paper</a></td></tr>
-<tr><td>ZK-Crypt</td><td></td><td>Carmi Gressel, Ran Granot, Gabi Vago</td><td></td></tr>
+<tr><td>ZK-Crypt</td><td></td><td>Carmi Gressel, Ran Granot, Gabi Vago; <b>patented</b></td><td></td></tr>
 </table>
 <p>
 Why is it reasonable to believe that a new design process
@@ -122,7 +122,7 @@
 but not all stream ciphers are pure-encryption stream ciphers.
 <p>
 Among the stream-cipher submissions,
-Frogbit, NLS, Phelix, SFINKS, SSS, and Vest
+Frogbit, NLS, Phelix, SFINKS, SSS, and VEST
 are labelled as incorporating authentication mechanisms.
 My impression is that both NLS and SFINKS are actually
 pure-encryption stream ciphers attached to separate authenticators;
@@ -167,7 +167,7 @@
 Exceptions:
 Salsa20 is faster than Phelix when the hardware offers more parallelism,
 and (in conjunction with Poly1305) is faster at rejecting forged packets.
-<h2>Notes on Rabbit</h2>
+<h2>Notes on Rabbit (patented)</h2>
 Authors report, for a Pentium III-1000,
 278 cycles to load a 16-byte key;
 plus 253 cycles to load a nonce;
@@ -371,7 +371,7 @@
 The cycles-per-byte count isn't even on the same scale as RC4;
 the authors are wildly misrepresenting RC4 speed.
 What advantages is Polar Bear supposed to have over AES?
-<h2>Notes on Fubuki</h2>
+<h2>Notes on Fubuki (patented)</h2>
 Authors report, for a Pentium M,
 489662 cycles for setup,
 plus 133 cycles/byte to encrypt a big block.
@@ -431,7 +431,7 @@
 16-byte key.
 14-byte nonce.
 Authors report approximately 1400 cycles/byte on a 2800MHz Pentium 4.
-<h2>Notes on DECIM</h2>
+<h2>Notes on DECIM (patented)</h2>
 10-byte key.
 8-byte nonce.
 <p>
@@ -449,7 +449,7 @@
 16-byte nonce.
 Authors report approximately 1500 cycles/byte on a 3400MHz Pentium 4,
 and call this ``reasonably efficient.''
-<h2>Notes on Frogbit</h2>
+<h2>Notes on Frogbit (patented)</h2>
 No speed reports.
 <h2>Notes on Grain</h2>
 10-byte key.
@@ -481,13 +481,13 @@
 ``A neat attack, thanks.
 I confess that trying a self-synchronous stream cipher
 was a departure from anything that we really knew how to do...''
-<h2>Notes on VEST-4</h2>
+<h2>Notes on VEST-4 (patented)</h2>
 10-byte key.
 No software speed reports.
-<h2>Notes on VEST-16</h2>
+<h2>Notes on VEST-16 (patented)</h2>
 16-byte key.
 No software speed reports.
-<h2>Notes on VEST-32</h2>
+<h2>Notes on VEST-32 (patented)</h2>
 32-byte key.
 No software speed reports.
 <h2>Notes on TRBDK3 YAEA</h2>
@@ -500,7 +500,7 @@
 <h2>Notes on MAG</h2>
 Initial impression:
 Paper needs to be cleaned up.
-<h2>Notes on ZK-Crypt</h2>
+<h2>Notes on ZK-Crypt (patented)</h2>
 No software speed reports.
 </body>
 </html>