cr.yp.to update
[email protected] 22 Jul 2005 05:59:54 -0000
| Newsgroups | gmane.comp.djb.announce |
|---|---|
| Message-ID | <[email protected]> |
diff -ru .old-crypto/streamciphers.html cr.yp.to/streamciphers.html --- .old-crypto/streamciphers.html 2005-07-18 15:20:21.000000000 -0400 +++ cr.yp.to/streamciphers.html 2005-07-20 10:21:44.000000000 -0400 @@ -30,15 +30,15 @@ <tr><th>Name</th><th>Key size</th><th>Authors; policy</th><th>Documents</th></tr> <tr><td>ABC</td><td>16 bytes</td><td>Vladimir Anashin, Andrey Bogdanov, Ilya Kizhvatov, Sandeep Kumar</td><td><a href="streamciphers/abc/abc.c">C</a> <a href="streamciphers/abc/desc.pdf">paper</a>; subsequent change in definition</td></tr> <tr><td>Achterbahn</td><td>10 bytes</td><td>Berndt Gammel, Rainer Goettfert, Oliver Kniffler</td><td><a href="streamciphers/achterbahn/desc.pdf">paper</a></td></tr> -<tr><td>DECIM</td><td>10 bytes</td><td>Come Berbain, Olivier Billet, Anne Canteaut, Nicolas Courtois, Blandine Debraize, Henri Gilbert, Louis Goubin, Aline Gouget, Louis Granboulan, Cedric Lauradoux, Marine Minier, Thomas Pornin, Herve Sibert</td><td><a href="streamciphers/decim/desc.pdf">paper</a></td></tr> +<tr><td>DECIM</td><td>10 bytes</td><td>Come Berbain, Olivier Billet, Anne Canteaut, Nicolas Courtois, Blandine Debraize, Henri Gilbert, Louis Goubin, Aline Gouget, Louis Granboulan, Cedric Lauradoux, Marine Minier, Thomas Pornin, Herve Sibert; <b>patented</b></td><td><a href="streamciphers/decim/desc.pdf">paper</a></td></tr> <tr><td>DICING</td><td>16 bytes</td><td>Li An-Ping</td><td><a href="streamciphers/dicing/desc.pdf">paper</a>; subsequent corrections</td></tr> <tr><td>Dragon-128</td><td>16 bytes</td><td>Ed Dawson, Kevin Chen, Matt Henricksen, William Millan, Leonie Simpson, HoonJae Lee, SangJae Moon</td><td><a href="streamciphers/dragon-128/dragon-ref.c">C</a> <a href="streamciphers/dragon-128/desc.pdf">paper</a></td></tr> <tr><td>Dragon-256</td><td>32 bytes</td><td>Ed Dawson, Kevin Chen, Matt Henricksen, William Millan, Leonie Simpson, HoonJae Lee, SangJae Moon</td><td><a href="streamciphers/dragon-128/dragon-ref.c">C</a> <a href="streamciphers/dragon-128/desc.pdf">paper</a></td></tr> <tr><td>Edon80</td><td>10 bytes</td><td>Danilo Gligoroski, Smile Markovski, Ljupco Kocarev, Marjan Gusev</td><td><a href="streamciphers/edon80/PartB1.pdf">desc</a> <a href="streamciphers/edon80/PartB2.pdf">robustness</a> <a href="streamciphers/edon80/PartB3.pdf">security</a> <a href="streamciphers/edon80/PartB4.pdf">advantages</a> <a href="streamciphers/edon80/PartB5.pdf">design</a> <a href="streamciphers/edon80/PartB6.pdf">speed</a> <a href="streamciphers/edon80/PartB7.pdf">impl</a></td></tr> <tr><td>F-FCSR-H</td><td>10 bytes</td><td>Thierry Berger, Francois Arnault, Cedric Lauradoux</td><td><a href="streamciphers/f-fcsr-8/B_SPECIF.PDF">paper</a></td></tr> <tr><td>F-FCSR-8</td><td>16 bytes</td><td>Thierry Berger, Francois Arnault, Cedric Lauradoux</td><td><a href="streamciphers/f-fcsr-8/B_SPECIF.PDF">paper</a></td></tr> -<tr><td>Frogbit</td><td>16 bytes</td><td>Thierry Moreau</td><td><a href="streamciphers/frogbit/frogbit.pdf">paper</a></td></tr> -<tr><td>Fubuki</td><td>16? bytes</td><td>Makoto Matsumoto, Hagita Mariko, Takuji Nishimura, Matsuo Saito</td><td><a href="streamciphers/fubuki/desc.pdf">paper</a></td></tr> +<tr><td>Frogbit</td><td>16 bytes</td><td>Thierry Moreau; <b>patented</b></td><td><a href="streamciphers/frogbit/frogbit.pdf">paper</a></td></tr> +<tr><td>Fubuki</td><td>16? bytes</td><td>Makoto Matsumoto, Hagita Mariko, Takuji Nishimura, Matsuo Saito; <b>patented</b></td><td><a href="streamciphers/fubuki/desc.pdf">paper</a></td></tr> <tr><td>Grain</td><td>10 bytes</td><td>Martin Hell, Thomas Johansson, Willi Meier</td><td><a href="streamciphers/grain/desc.pdf">paper</a>; subsequent corrections</td></tr> <tr><td>HC-256</td><td>32 bytes</td><td>Hongjun Wu; ``HC-256 is not covered by any patent and it is freely available''</td><td><a href="streamciphers/hc-256/desc.pdf">paper</a></td></tr> <tr><td>Hermes8-80</td><td>10 bytes</td><td>Ulrich Kaiser</td><td><a href="streamciphers/hermes8-128/desc.pdf">paper</a></td></tr> @@ -55,7 +55,7 @@ <tr><td>POMARANCH (CJCSG)</td><td>16 bytes</td><td>Cees Jansen, Tor Helleseth, Alexander Kholosha</td><td><a href="streamciphers/pomaranch/desc.pdf">paper</a></td></tr> <tr><td>Py6</td><td>32? bytes</td><td>Eli Biham, Jennifer Seberry; ``No royalty will be necessary for use of Py''</td><td><a href="streamciphers/py6/py6.c">C</a> <a href="streamciphers/py/desc.pdf">paper</a></td></tr> <tr><td>Py</td><td>32? bytes</td><td>Eli Biham, Jennifer Seberry; ``No royalty will be necessary for use of Py''</td><td><a href="streamciphers/py/py.c">C</a> <a href="streamciphers/py/desc.pdf">paper</a></td></tr> -<tr><td>Rabbit</td><td>16 bytes</td><td>Martin Boesgaard, Mette Vesterager, Thomas Christensen, Erik Zenner</td><td><a href="streamciphers/rabbit/rabbit.c">C</a> <a href="streamciphers/rabbit/desc.pdf">paper</a> <a href="http://www.cryptico.com/Default.asp?ID=10">link</a></td> +<tr><td>Rabbit</td><td>16 bytes</td><td>Martin Boesgaard, Mette Vesterager, Thomas Christensen, Erik Zenner; <b>patented</b></td><td><a href="streamciphers/rabbit/rabbit.c">C</a> <a href="streamciphers/rabbit/desc.pdf">paper</a> <a href="http://www.cryptico.com/Default.asp?ID=10">link</a></td> <tr><td>Salsa20 (Snuffle 2005)</td><td>32 bytes</td><td>Daniel J. Bernstein; ``My policy is that Salsa20 is free for everyone to use''</td><td><a href="snuffle/ecrypt.c">C</a> <a href="snuffle/spec.pdf">spec</a> <a href="snuffle/security.pdf">security</a> <a href="snuffle/design.pdf">design</a> <a href="snuffle/speed.pdf">speed</a> <a href="snuffle/robustness.pdf">robustness</a> <a href="snuffle/ip.pdf">IP</a> <a href="snuffle.html">link</a></td></tr> <tr><td>Self-Synchronous SOBER (SSS) <b>withdrawn by author</b></td><td>16 bytes</td><td>Gregory Rose, Philip Hawkes, Michael Paddon, Miriam Wiggers de Vries; ``QUALCOMM Incorporated allows free and unrestricted use of any of its intellectual property required to exercise the primitive''</td><td><a href="streamciphers/sss/desc.pdf">paper</a> <a href="http://people.qualcomm.com/ggr/NLS-SSS.html">link</a></td></tr> <tr><td>SFINKS</td><td>10 bytes</td><td>An Braeken, Joseph Lano, Nele Mentens, Bart Preneel, Ingrid Verbauwhede</td><td><a href="streamciphers/sfinks/desc.pdf">paper</a></td></tr> @@ -63,12 +63,12 @@ <tr><td>TRBDK3 YAEA</td><td></td><td>Timothy Brigham</td><td><a href="streamciphers/trbdk3-yaea/desc.ps">paper</a></td></tr> <tr><td>Trivium</td><td>10 bytes</td><td>Christophe De Canniere, Bart Preneel</td><td><a href="streamciphers/trivium/desc.pdf">paper</a></td></tr> <tr><td>TSC-3 <b>withdrawn by author</b></td><td>10 bytes</td><td>Jin Hong, Dong Hoon Lee, Yongjin Yeom, Daewan Han, Seongtaek Chee</td><td><a href="streamciphers/tsc-3/desc.pdf">paper</a></td></tr> -<tr><td>VEST-4</td><td>10 bytes</td><td>Claude Bigeard, Sean O'Neil, Benjamin Gittins, Howard Landman</td><td><a href="streamciphers/vest-16/desc.pdf">paper</a></td></tr> -<tr><td>VEST-16</td><td>16 bytes</td><td>Claude Bigeard, Sean O'Neil, Benjamin Gittins, Howard Landman</td><td><a href="streamciphers/vest-16/desc.pdf">paper</a></td></tr> -<tr><td>VEST-32</td><td>32 bytes</td><td>Claude Bigeard, Sean O'Neil, Benjamin Gittins, Howard Landman</td><td><a href="streamciphers/vest-16/desc.pdf">paper</a></td></tr> +<tr><td>VEST-4</td><td>10 bytes</td><td>Claude Bigeard, Sean O'Neil, Benjamin Gittins, Howard Landman; <b>patented</b></td><td><a href="streamciphers/vest-16/desc.pdf">paper</a></td></tr> +<tr><td>VEST-16</td><td>16 bytes</td><td>Claude Bigeard, Sean O'Neil, Benjamin Gittins, Howard Landman; <b>patented</b></td><td><a href="streamciphers/vest-16/desc.pdf">paper</a></td></tr> +<tr><td>VEST-32</td><td>32 bytes</td><td>Claude Bigeard, Sean O'Neil, Benjamin Gittins, Howard Landman; <b>patented</b></td><td><a href="streamciphers/vest-16/desc.pdf">paper</a></td></tr> <tr><td>WG</td><td>16 bytes</td><td>Guang Gong, Yassir Nawaz</td><td><a href="streamciphers/wg/desc.pdf">paper</a>; subsequent corrections; subsequent asm; subsequent change in definition (slower setup) in response to attack</td></tr> <tr><td>YAMB</td><td>32 bytes</td><td>Anatoly N. Lebedev, Alexander Ivanov, Sergey Starodubtzev, Alexey Kolchkov</td><td><a href="streamciphers/yamb/yamb.c">C</a> <a href="streamciphers/yamb/desc.pdf">paper</a></td></tr> -<tr><td>ZK-Crypt</td><td></td><td>Carmi Gressel, Ran Granot, Gabi Vago</td><td></td></tr> +<tr><td>ZK-Crypt</td><td></td><td>Carmi Gressel, Ran Granot, Gabi Vago; <b>patented</b></td><td></td></tr> </table> <p> Why is it reasonable to believe that a new design process @@ -122,7 +122,7 @@ but not all stream ciphers are pure-encryption stream ciphers. <p> Among the stream-cipher submissions, -Frogbit, NLS, Phelix, SFINKS, SSS, and Vest +Frogbit, NLS, Phelix, SFINKS, SSS, and VEST are labelled as incorporating authentication mechanisms. My impression is that both NLS and SFINKS are actually pure-encryption stream ciphers attached to separate authenticators; @@ -167,7 +167,7 @@ Exceptions: Salsa20 is faster than Phelix when the hardware offers more parallelism, and (in conjunction with Poly1305) is faster at rejecting forged packets. -<h2>Notes on Rabbit</h2> +<h2>Notes on Rabbit (patented)</h2> Authors report, for a Pentium III-1000, 278 cycles to load a 16-byte key; plus 253 cycles to load a nonce; @@ -371,7 +371,7 @@ The cycles-per-byte count isn't even on the same scale as RC4; the authors are wildly misrepresenting RC4 speed. What advantages is Polar Bear supposed to have over AES? -<h2>Notes on Fubuki</h2> +<h2>Notes on Fubuki (patented)</h2> Authors report, for a Pentium M, 489662 cycles for setup, plus 133 cycles/byte to encrypt a big block. @@ -431,7 +431,7 @@ 16-byte key. 14-byte nonce. Authors report approximately 1400 cycles/byte on a 2800MHz Pentium 4. -<h2>Notes on DECIM</h2> +<h2>Notes on DECIM (patented)</h2> 10-byte key. 8-byte nonce. <p> @@ -449,7 +449,7 @@ 16-byte nonce. Authors report approximately 1500 cycles/byte on a 3400MHz Pentium 4, and call this ``reasonably efficient.'' -<h2>Notes on Frogbit</h2> +<h2>Notes on Frogbit (patented)</h2> No speed reports. <h2>Notes on Grain</h2> 10-byte key. @@ -481,13 +481,13 @@ ``A neat attack, thanks. I confess that trying a self-synchronous stream cipher was a departure from anything that we really knew how to do...'' -<h2>Notes on VEST-4</h2> +<h2>Notes on VEST-4 (patented)</h2> 10-byte key. No software speed reports. -<h2>Notes on VEST-16</h2> +<h2>Notes on VEST-16 (patented)</h2> 16-byte key. No software speed reports. -<h2>Notes on VEST-32</h2> +<h2>Notes on VEST-32 (patented)</h2> 32-byte key. No software speed reports. <h2>Notes on TRBDK3 YAEA</h2> @@ -500,7 +500,7 @@ <h2>Notes on MAG</h2> Initial impression: Paper needs to be cleaned up. -<h2>Notes on ZK-Crypt</h2> +<h2>Notes on ZK-Crypt (patented)</h2> No software speed reports. </body> </html>