cr.yp.to update

 streamciphers.html |  131 ++++++++++++++++++++++++++++++++---------------------
 1 files changed, 80 insertions(+), 51 deletions(-)
New: streamciphers/abc/2006-029.pdf
diff -ru .old-crypto/streamciphers.html cr.yp.to/streamciphers.html
--- .old-crypto/streamciphers.html	2006-02-16 06:53:18.000000000 -0500
+++ cr.yp.to/streamciphers.html	2006-02-22 17:31:50.000000000 -0500
@@ -43,44 +43,50 @@
 <h2><a name="table">Table of submissions</a></h2>
 Here's my own list of the submissions:
 <table border>
-<tr><th>Name</th><th>Security claim; key bits</th><th>Authors; policy</th><th>Documents</th></tr>
-<tr><td>ABC: version 1 <b>withdrawn</b>; version 2</td><td>128; 128</td><td>Vladimir Anashin, Andrey Bogdanov, Ilya Kizhvatov, Sandeep Kumar</td><td><a href="streamciphers/abc/abc.c">C</a> <a href="streamciphers/abc/desc.pdf">paper</a> <a href="streamciphers/abc/050.pdf">v2</a></td></tr>
-<tr><td>Achterbahn: version 1 <b>withdrawn</b>; version 2</td><td><b>80; 80</b></td><td>Berndt Gammel, Rainer Goettfert, Oliver Kniffler</td><td><a href="streamciphers/achterbahn/desc.pdf">paper</a> <a href="streamciphers/achterbahn/072.pdf">v2</a></td></tr>
-<tr><td>CryptMT: version 1; version 2</td><td>256; 256</td><td>Makoto Matsumoto, Hagita Mariko, Takuji Nishimura, Matsuo Saito; <b>patented</b></td><td><a href="streamciphers/fubuki/desc.pdf">paper</a></td></tr>
-<tr><td>DECIM: version 1 <b>withdrawn</b>; version 2</td><td><b>80; 80</b></td><td>Come Berbain, Olivier Billet, Anne Canteaut, Nicolas Courtois, Blandine Debraize, Henri Gilbert, Louis Goubin, Aline Gouget, Louis Granboulan, Cedric Lauradoux, Marine Minier, Thomas Pornin, Herve Sibert; <b>patented</b></td><td><a href="streamciphers/decim/desc.pdf">paper</a></td></tr>
-<tr><td>DICING: version 0 <b>withdrawn</b>; version 1; version 2</td><td>128; 128</td><td>Li An-Ping</td><td><a href="streamciphers/dicing/desc0.pdf">paper</a> <a href="streamciphers/dicing/desc2.pdf">v1</a></td></tr>
-<tr><td>Dragon</td><td>256; 256</td><td>Ed Dawson, Kevin Chen, Matt Henricksen, William Millan, Leonie Simpson, HoonJae Lee, SangJae Moon</td><td><a href="streamciphers/dragon-128/dragon-ref.c">C</a> <a href="streamciphers/dragon-128/desc.pdf">paper</a></td></tr>
-<tr><td>Edon80</td><td><b>80; 80</b></td><td>Danilo Gligoroski, Smile Markovski, Ljupco Kocarev, Marjan Gusev</td><td><a href="streamciphers/edon80/PartB1.pdf">desc</a> <a href="streamciphers/edon80/PartB2.pdf">robustness</a> <a href="streamciphers/edon80/PartB3.pdf">security</a> <a href="streamciphers/edon80/PartB4.pdf">advantages</a> <a href="streamciphers/edon80/PartB5.pdf">design</a> <a href="streamciphers/edon80/PartB6.pdf">speed</a> <a href="streamciphers/edon80/PartB7.pdf">impl</a></td></tr>
-<tr><td>F-FCSR-H: version 1 <b>withdrawn</b>; version 2</td><td><b>80; 80</b></td><td>Thierry Berger, Francois Arnault, Cedric Lauradoux</td><td><a href="streamciphers/f-fcsr-8/B_SPECIF.PDF">paper</a> <a href="streamciphers/f-fcsr-8/075.pdf">v2</a></td></tr>
-<tr><td>F-FCSR-8: version 1 <b>withdrawn</b>; version 2</td><td><b>128; 128</b></td><td>Thierry Berger, Francois Arnault, Cedric Lauradoux</td><td><a href="streamciphers/f-fcsr-8/B_SPECIF.PDF">paper</a> <a href="streamciphers/f-fcsr-8/075.pdf">v2</a></td></tr>
-<tr><td>Frogbit <b>unsafe</b></td><td>128; 128</td><td>Thierry Moreau; <b>patented</b></td><td><a href="streamciphers/frogbit/frogbit.pdf">paper</a></td></tr>
-<tr><td>Fubuki</td><td>256; 256</td><td>Makoto Matsumoto, Hagita Mariko, Takuji Nishimura, Matsuo Saito; <b>patented</b></td><td><a href="streamciphers/fubuki/desc.pdf">paper</a></td></tr>
-<tr><td>Grain: version 1 <b>withdrawn</b>; version 2</td><td><b>80; 80</b></td><td>Martin Hell, Thomas Johansson, Willi Meier</td><td><a href="streamciphers/grain/desc.pdf">paper</a>; subsequent corrections</td></tr>
-<tr><td>HC-256</td><td>256; 256</td><td>Hongjun Wu; ``HC-256 is not covered by any patent and it is freely available''</td><td><a href="streamciphers/hc-256/desc.pdf">paper</a></td></tr>
-<tr><td>Hermes8</td><td><b>128; 128</b></td><td>Ulrich Kaiser</td><td><a href="streamciphers/hermes8-128/desc.pdf">paper</a></td></tr>
-<tr><td>LEX</td><td>128; 128</td><td>Alex Biryukov</td><td><a href="streamciphers/lex/desc.pdf">paper</a></td></tr>
-<tr><td>MAG: version 1 <b>withdrawn</b>; version 2; version 3</td><td></td><td>Rade Vuckovac</td><td><a href="streamciphers/mag/desc.pdf">paper</a></td></tr>
-<tr><td>MICKEY</td><td>128; 128</td><td>Steve Babbage, Matthew Dodd</td><td><a href="streamciphers/mickey/desc.pdf">paper</a></td></tr>
-<tr><td>Mir-1</td><td>128; 128</td><td>Alexander Maximov</td><td><a href="streamciphers/mir-1/desc.pdf">paper</a>; subsequent asm</td></tr>
-<tr><td>Mosquito <b>withdrawn</b></td><td><b>96; 96</b></td><td>Joan Daemen, Paris Kitsos</td><td><a href="streamciphers/mosquito/desc.pdf">paper</a>; subsequent corrections</td></tr>
-<tr><td>Non-Linear SOBER (NLS)</td><td>128; 128</td><td>Gregory Rose, Philip Hawkes, Michael Paddon, Miriam Wiggers de Vries; ``QUALCOMM Incorporated allows free and unrestricted use of any of its intellectual property required to exercise the primitive''</td><td><a href="streamciphers/nls/nlsref.c">C</a> <a href="streamciphers/nls/desc.pdf">paper</a> <a href="http://people.qualcomm.com/ggr/NLS-SSS.html">link</a></td></tr>
-<tr><td>Phelix</td><td>128; 256</td><td>Doug Whiting, Bruce Schneier, Stephan Lucks, Frederic Muller; ``We hereby explicitly release any intellectual property rights to Phelix into the public domain''</td><td><a href="streamciphers/phelix/phelix.c">C</a> <a href="streamciphers/phelix/desc.pdf">paper</a> <a href="http://www.schneier.com/paper-phelix.html">link</a></td></tr>
-<tr><td>Polar Bear <b>withdrawn</b></td><td>128; 128</td><td>Johan Haastad, Mats Naeslund</td><td><a href="streamciphers/polar-bear/desc.pdf">paper</a></td></tr>
-<tr><td>POMARANCH (CJCSG) version 1 <b>withdrawn</b>; version 2</td><td>128; 128</td><td>Cees Jansen, Tor Helleseth, Alexander Kholosha</td><td><a href="streamciphers/pomaranch/desc.pdf">paper</a>; <a href="streamciphers/pomaranch/070.pdf">paper</a>; <a href="streamciphers/pomaranch/074.pdf">v2</a></td></tr>
-<tr><td>Py6</td><td>256; 256</td><td>Eli Biham, Jennifer Seberry; ``No royalty will be necessary for use of Py''</td><td><a href="streamciphers/py6/py6.c">C</a> <a href="streamciphers/py/desc.pdf">paper</a></td></tr>
-<tr><td>Py</td><td>256; 256</td><td>Eli Biham, Jennifer Seberry; ``No royalty will be necessary for use of Py''</td><td><a href="streamciphers/py/py.c">C</a> <a href="streamciphers/py/desc.pdf">paper</a></td></tr>
-<tr><td>Rabbit</td><td>128; 128</td><td>Martin Boesgaard, Mette Vesterager, Thomas Christensen, Erik Zenner; <b>patented</b></td><td><a href="streamciphers/rabbit/rabbit.c">C</a> <a href="streamciphers/rabbit/desc.pdf">paper</a> <a href="http://www.cryptico.com/Default.asp?ID=10">link</a></td>
-<tr><td>Salsa20 (Snuffle 2005)</td><td>256; 256</td><td>Daniel J. Bernstein; ``My policy is that Salsa20 is free for everyone to use''</td><td><a href="snuffle/ecrypt.c">C</a> <a href="snuffle/spec.pdf">spec</a> <a href="snuffle/security.pdf">security</a> <a href="snuffle/design.pdf">design</a> <a href="snuffle/speed.pdf">speed</a> <a href="snuffle/robustness.pdf">robustness</a> <a href="snuffle/ip.pdf">IP</a> <a href="snuffle.html">link</a></td></tr>
-<tr><td>Self-Synchronous SOBER (SSS) <b>withdrawn</b></td><td>128; 128</td><td>Gregory Rose, Philip Hawkes, Michael Paddon, Miriam Wiggers de Vries; ``QUALCOMM Incorporated allows free and unrestricted use of any of its intellectual property required to exercise the primitive''</td><td><a href="streamciphers/sss/desc.pdf">paper</a> <a href="http://people.qualcomm.com/ggr/NLS-SSS.html">link</a></td></tr>
-<tr><td>SFINKS</td><td><b>80; 80</b></td><td>An Braeken, Joseph Lano, Nele Mentens, Bart Preneel, Ingrid Verbauwhede</td><td><a href="streamciphers/sfinks/desc.pdf">paper</a></td></tr>
-<tr><td>SOSEMANUK</td><td>128; 256</td><td>Come Berbain, Olivier Billet, Anne Canteaut, Nicolas Courtois, Henri Gilbert, Louis Goubin, Aline Gouget, Louis Granboulan, Cedric Lauradoux, Marine Minier, Thomas Pornin, Herve Sibert; ``Permission is granted to anyone to use this software for any purpose, including commercial applications''</td><td><a href="streamciphers/sosemanuk/SOSEMANUK.C">C</a> <a href="streamciphers/sosemanuk/desc.pdf">paper</a></td></tr>
-<tr><td>TRBDK3 YAEA</td><td></td><td>Timothy Brigham</td><td><a href="streamciphers/trbdk3-yaea/desc.ps">paper</a></td></tr>
-<tr><td>Trivium</td><td><b>80; 80</b></td><td>Christophe De Canniere, Bart Preneel</td><td><a href="streamciphers/trivium/desc.pdf">paper</a></td></tr>
-<tr><td>TSC-3 <b>withdrawn</b></td><td><b>80; 80</b></td><td>Jin Hong, Dong Hoon Lee, Yongjin Yeom, Daewan Han, Seongtaek Chee</td><td><a href="streamciphers/tsc-3/desc.pdf">paper</a></td></tr>
-<tr><td>VEST</td><td>256; 256</td><td>Claude Bigeard, Sean O'Neil, Benjamin Gittins, Howard Landman; <b>patented</b></td><td><a href="streamciphers/vest-16/desc.pdf">paper</a></td></tr>
-<tr><td>WG: version 1 <b>withdrawn</b>; version 2</td><td>128; 128</td><td>Guang Gong, Yassir Nawaz</td><td><a href="streamciphers/wg/desc.pdf">paper</a>; subsequent corrections; <a href="streamciphers/wg/047.pdf">v2</a></td></tr>
-<tr><td>YAMB <b>unsafe</b></td><td>256; 256</td><td>Anatoly N. Lebedev, Alexander Ivanov, Sergey Starodubtzev, Alexey Kolchkov</td><td><a href="streamciphers/yamb/yamb.c">C</a> <a href="streamciphers/yamb/desc.pdf">paper</a></td></tr>
-<tr><td>ZK-Crypt: version 1 <b>withdrawn</b>; version 2</td><td></td><td>Carmi Gressel, Ran Granot, Gabi Vago; <b>patented</b></td><td></td></tr>
+<tr><th>Name</th><th>Key bits</th><th>Security conjecture</th><th>Authors; policy</th><th>Documents</th></tr>
+<tr><td colspan="5"><hr></td></tr>
+<tr><td>CryptMT: version 1; version 2</td><td>256</td><td>256</td><td>Makoto Matsumoto, Hagita Mariko, Takuji Nishimura, Matsuo Saito; <b>patented</b></td><td><a href="streamciphers/fubuki/desc.pdf">paper</a></td></tr>
+<tr><td>Dragon</td><td>256</td><td>256</td><td>Ed Dawson, Kevin Chen, Matt Henricksen, William Millan, Leonie Simpson, HoonJae Lee, SangJae Moon</td><td><a href="streamciphers/dragon-128/dragon-ref.c">C</a> <a href="streamciphers/dragon-128/desc.pdf">paper</a></td></tr>
+<tr><td>Fubuki</td><td>256</td><td>256</td><td>Makoto Matsumoto, Hagita Mariko, Takuji Nishimura, Matsuo Saito; <b>patented</b></td><td><a href="streamciphers/fubuki/desc.pdf">paper</a></td></tr>
+<tr><td>HC-256</td><td>256</td><td>256</td><td>Hongjun Wu; ``HC-256 is not covered by any patent and it is freely available''</td><td><a href="streamciphers/hc-256/desc.pdf">paper</a></td></tr>
+<tr><td>MAG: version 1 <b>withdrawn</b>; version 2; version 3</td><td>256</td><td>256</td><td>Rade Vuckovac</td><td><a href="streamciphers/mag/desc.pdf">paper</a></td></tr>
+<tr><td>Salsa20 (Snuffle 2005)</td><td>256</td><td>256</td><td>Daniel J. Bernstein; ``My policy is that Salsa20 is free for everyone to use''</td><td><a href="snuffle/ecrypt.c">C</a> <a href="snuffle/spec.pdf">spec</a> <a href="snuffle/security.pdf">security</a> <a href="snuffle/design.pdf">design</a> <a href="snuffle/speed.pdf">speed</a> <a href="snuffle/robustness.pdf">robustness</a> <a href="snuffle/ip.pdf">IP</a> <a href="snuffle.html">link</a></td></tr>
+<tr><td>VEST</td><td>256</td><td>256</td><td>Claude Bigeard, Sean O'Neil, Benjamin Gittins, Howard Landman; <b>patented</b></td><td><a href="streamciphers/vest-16/desc.pdf">paper</a></td></tr>
+<tr><td colspan="5"><hr></td></tr>
+<tr><td>SOSEMANUK</td><td>256</td><td>224</td><td>Come Berbain, Olivier Billet, Anne Canteaut, Nicolas Courtois, Henri Gilbert, Louis Goubin, Aline Gouget, Louis Granboulan, Cedric Lauradoux, Marine Minier, Thomas Pornin, Herve Sibert; ``Permission is granted to anyone to use this software for any purpose, including commercial applications''</td><td><a href="streamciphers/sosemanuk/SOSEMANUK.C">C</a> <a href="streamciphers/sosemanuk/desc.pdf">paper</a></td></tr>
+<tr><td colspan="5"><hr></td></tr>
+<tr><td>Phelix</td><td>256</td><td>128</td><td>Doug Whiting, Bruce Schneier, Stephan Lucks, Frederic Muller; ``We hereby explicitly release any intellectual property rights to Phelix into the public domain''</td><td><a href="streamciphers/phelix/phelix.c">C</a> <a href="streamciphers/phelix/desc.pdf">paper</a> <a href="http://www.schneier.com/paper-phelix.html">link</a></td></tr>
+<tr><td>DICING: version 0 <b>withdrawn</b>; version 1; version 2</td><td>128</td><td>128</td><td>Li An-Ping</td><td><a href="streamciphers/dicing/desc0.pdf">paper</a> <a href="streamciphers/dicing/desc2.pdf">v1</a></td></tr>
+<tr><td>F-FCSR-8: version 1 <b>withdrawn</b>; version 2</td><td>128</td><td>128</td><td>Thierry Berger, Francois Arnault, Cedric Lauradoux</td><td><a href="streamciphers/f-fcsr-8/B_SPECIF.PDF">paper</a> <a href="streamciphers/f-fcsr-8/075.pdf">v2</a></td></tr>
+<tr><td>Hermes8</td><td>128</td><td>128</td><td>Ulrich Kaiser</td><td><a href="streamciphers/hermes8-128/desc.pdf">paper</a></td></tr>
+<tr><td>LEX</td><td>128</td><td>128</td><td>Alex Biryukov</td><td><a href="streamciphers/lex/desc.pdf">paper</a></td></tr>
+<tr><td>MICKEY</td><td>128</td><td>128</td><td>Steve Babbage, Matthew Dodd</td><td><a href="streamciphers/mickey/desc.pdf">paper</a></td></tr>
+<tr><td>POMARANCH (CJCSG) version 1 <b>withdrawn</b>; version 2</td><td>128</td><td>128</td><td>Cees Jansen, Tor Helleseth, Alexander Kholosha</td><td><a href="streamciphers/pomaranch/desc.pdf">paper</a>; <a href="streamciphers/pomaranch/070.pdf">paper</a>; <a href="streamciphers/pomaranch/074.pdf">v2</a></td></tr>
+<tr><td>Rabbit</td><td>128</td><td>128</td><td>Martin Boesgaard, Mette Vesterager, Thomas Christensen, Erik Zenner; <b>patented</b></td><td><a href="streamciphers/rabbit/rabbit.c">C</a> <a href="streamciphers/rabbit/desc.pdf">paper</a> <a href="http://www.cryptico.com/Default.asp?ID=10">link</a></td>
+<tr><td>WG: version 1 <b>withdrawn</b>; version 2</td><td>128</td><td>128</td><td>Guang Gong, Yassir Nawaz</td><td><a href="streamciphers/wg/desc.pdf">paper</a>; subsequent corrections; <a href="streamciphers/wg/047.pdf">v2</a></td></tr>
+<tr><td>ZK-Crypt: version 1 <b>withdrawn</b>; version 2</td><td>128</td><td>128</td><td>Carmi Gressel, Ran Granot, Gabi Vago; <b>patented</b></td><td></td></tr>
+<tr><td colspan="5"><hr></td></tr>
+<tr><td>Achterbahn: version 1 <b>withdrawn</b>; version 2</td><td><b>80</td><td>80</b></td><td>Berndt Gammel, Rainer Goettfert, Oliver Kniffler</td><td><a href="streamciphers/achterbahn/desc.pdf">paper</a> <a href="streamciphers/achterbahn/072.pdf">v2</a></td></tr>
+<tr><td>DECIM: version 1 <b>withdrawn</b>; version 2</td><td><b>80</td><td>80</b></td><td>Come Berbain, Olivier Billet, Anne Canteaut, Nicolas Courtois, Blandine Debraize, Henri Gilbert, Louis Goubin, Aline Gouget, Louis Granboulan, Cedric Lauradoux, Marine Minier, Thomas Pornin, Herve Sibert; <b>patented</b></td><td><a href="streamciphers/decim/desc.pdf">paper</a></td></tr>
+<tr><td>Edon80</td><td><b>80</td><td>80</b></td><td>Danilo Gligoroski, Smile Markovski, Ljupco Kocarev, Marjan Gusev</td><td><a href="streamciphers/edon80/PartB1.pdf">desc</a> <a href="streamciphers/edon80/PartB2.pdf">robustness</a> <a href="streamciphers/edon80/PartB3.pdf">security</a> <a href="streamciphers/edon80/PartB4.pdf">advantages</a> <a href="streamciphers/edon80/PartB5.pdf">design</a> <a href="streamciphers/edon80/PartB6.pdf">speed</a> <a href="streamciphers/edon80/PartB7.pdf">impl</a></td></tr>
+<tr><td>F-FCSR-H: version 1 <b>withdrawn</b>; version 2</td><td><b>80</td><td>80</b></td><td>Thierry Berger, Francois Arnault, Cedric Lauradoux</td><td><a href="streamciphers/f-fcsr-8/B_SPECIF.PDF">paper</a> <a href="streamciphers/f-fcsr-8/075.pdf">v2</a></td></tr>
+<tr><td>Grain: version 1 <b>withdrawn</b>; version 2</td><td><b>80</td><td>80</b></td><td>Martin Hell, Thomas Johansson, Willi Meier</td><td><a href="streamciphers/grain/desc.pdf">paper</a>; subsequent corrections</td></tr>
+<tr><td>SFINKS</td><td><b>80</td><td>80</b></td><td>An Braeken, Joseph Lano, Nele Mentens, Bart Preneel, Ingrid Verbauwhede</td><td><a href="streamciphers/sfinks/desc.pdf">paper</a></td></tr>
+<tr><td>Trivium</td><td><b>80</td><td>80</b></td><td>Christophe De Canniere, Bart Preneel</td><td><a href="streamciphers/trivium/desc.pdf">paper</a></td></tr>
+<tr><td colspan="5"><hr></td></tr>
+<tr><td>Py6</td><td>256</td><td><b>low</b></td><td>Eli Biham, Jennifer Seberry; ``No royalty will be necessary for use of Py''</td><td><a href="streamciphers/py6/py6.c">C</a> <a href="streamciphers/py/desc.pdf">paper</a></td></tr>
+<tr><td>Py</td><td>256</td><td><b>low</b></td><td>Eli Biham, Jennifer Seberry; ``No royalty will be necessary for use of Py''</td><td><a href="streamciphers/py/py.c">C</a> <a href="streamciphers/py/desc.pdf">paper</a></td></tr>
+<tr><td>YAMB</td><td>256</td><td><b>low</b></td><td>Anatoly N. Lebedev, Alexander Ivanov, Sergey Starodubtzev, Alexey Kolchkov</td><td><a href="streamciphers/yamb/yamb.c">C</a> <a href="streamciphers/yamb/desc.pdf">paper</a></td></tr>
+<tr><td>ABC: version 1 <b>withdrawn</b>; version 2</td><td>128</td><td><b>low</b></td><td>Vladimir Anashin, Andrey Bogdanov, Ilya Kizhvatov, Sandeep Kumar</td><td><a href="streamciphers/abc/abc.c">C</a> <a href="streamciphers/abc/desc.pdf">paper</a> <a href="streamciphers/abc/050.pdf">v2</a></td></tr>
+<tr><td>Frogbit</td><td>128</td><td><b>low</b></td><td>Thierry Moreau; <b>patented</b></td><td><a href="streamciphers/frogbit/frogbit.pdf">paper</a></td></tr>
+<tr><td>Mir-1</td><td>128</td><td><b>low</b></td><td>Alexander Maximov</td><td><a href="streamciphers/mir-1/desc.pdf">paper</a>; subsequent asm</td></tr>
+<tr><td>Non-Linear SOBER (NLS)</td><td>128</td><td><b>low</b></td><td>Gregory Rose, Philip Hawkes, Michael Paddon, Miriam Wiggers de Vries; ``QUALCOMM Incorporated allows free and unrestricted use of any of its intellectual property required to exercise the primitive''</td><td><a href="streamciphers/nls/nlsref.c">C</a> <a href="streamciphers/nls/desc.pdf">paper</a> <a href="http://people.qualcomm.com/ggr/NLS-SSS.html">link</a></td></tr>
+<tr><td>Polar Bear <b>withdrawn</b></td><td>128</td><td><b>low</b></td><td>Johan Haastad, Mats Naeslund</td><td><a href="streamciphers/polar-bear/desc.pdf">paper</a></td></tr>
+<tr><td>Self-Synchronous SOBER (SSS) <b>withdrawn</b></td><td>128</td><td><b>low</b></td><td>Gregory Rose, Philip Hawkes, Michael Paddon, Miriam Wiggers de Vries; ``QUALCOMM Incorporated allows free and unrestricted use of any of its intellectual property required to exercise the primitive''</td><td><a href="streamciphers/sss/desc.pdf">paper</a> <a href="http://people.qualcomm.com/ggr/NLS-SSS.html">link</a></td></tr>
+<tr><td>Mosquito <b>withdrawn</b></td><td><b>96</b></td><td><b>low</b></td><td>Joan Daemen, Paris Kitsos</td><td><a href="streamciphers/mosquito/desc.pdf">paper</a>; subsequent corrections</td></tr>
+<tr><td>TSC-3 <b>withdrawn</b></td><td><b>80</td><td><b>low</b></b></td><td>Jin Hong, Dong Hoon Lee, Yongjin Yeom, Daewan Han, Seongtaek Chee</td><td><a href="streamciphers/tsc-3/desc.pdf">paper</a></td></tr>
+<tr><td colspan="5"><hr></td></tr>
+<tr><td>TRBDK3 YAEA</td><td></td><td></td><td>Timothy Brigham</td><td><a href="streamciphers/trbdk3-yaea/desc.ps">paper</a></td></tr>
 </table>
 <h2><a name="vsaes">Advantages over AES</a></h2>
 Why is it reasonable to believe that a new design process
@@ -729,17 +735,35 @@
 Author writes: ``I've closed this `backdoor'...
 Please, have a look on the improved version.''
 <h2><a name="withdrawn">Withdrawn ciphers and tweaks of those ciphers</a></h2>
-So far the eSTREAM administrators
-haven't allowed tweaks of withdrawn ciphers
-(except for DICING, which was tweaked very early in the process);
-for example,
-the tweaks aren't covered by the benchmark suite.
-I can understand the annoyance of
-a cryptanalyst faced with an apparently neverending series of breakable tweaks.
-On the other hand,
-ABC version 2 is very fast,
-so I'd like to see it remain under consideration
-unless and until it's broken.
+``At the end of the first phase,
+it is likely that a subset of the first phase ciphers
+will be advanced to the second phase,''
+said the original eSTREAM call.
+``This will provide further
+focus to ongoing analysis within the cryptographic community.
+Since the goal of the project is to derive good stream ciphers,
+it is likely that potentially significant "tweaks"
+will be permitted in moving to the second phase.''
+<p>
+``Since June 13th 2005 ...
+ECRYPT has refused any changes to the primitives available for download,''
+said the ECRYPT web site.
+``It is possible that the submitter of [a broken] algorithm
+might be invited to try and repair their submission,''
+said the eSTREAM Update 1 document.
+Some implementations of tweaked algorithms
+(such as DICING v1, which replaced DICING v0 in May 2005,
+and ABC v2, which replaced ABC v1 in July 2005)
+have been allowed into the eSTREAM benchmark suite.
+<p>
+I previously wrote
+``I can understand the annoyance of a cryptanalyst
+faced with an apparently neverending series of breakable tweaks.
+On the other hand, ABC version 2 is very fast,
+so I'd like to see it remain under consideration unless and until it's broken.''
+Apparently ABC version 2 has also been broken now (February 2006).
+eSTREAM is a limited-time project,
+so presumably it won't allow ABC version 3.
 <p>
 <b>ABC version 1 (withdrawn).</b>
 Berbain and Gilbert write:
@@ -776,6 +800,12 @@
 After the authors disputed the attack,
 Khazaei and Kiaei withdrew their claim and apologized.
 <p>
+Wu and Preneel report an (experimentally confirmed) attack that
+finds a key with probability 2^-32,
+given about 2^32 bytes of output.
+Paper: <a href="streamciphers/abc/2006-029.pdf">[PDF]</a>.
+<b>No response yet from the authors.</b>
+<p>
 <b>Achterbahn version 1 (withdrawn).</b>
 Johnasson, Meier, and Muller write:
 ``We present several attacks which break the cipher
@@ -937,8 +967,7 @@
 and about $2^{55}$ simple operations (32-bit addition or subtraction).''
 Paper: <a href="streamciphers/yamb/043.pdf">[PDF]</a>.
 <b>No response from the authors after six months.</b>
-I'm treating YAMB as effectively withdrawn,
-but I'm unhappy about the unclear status.
+I'm treating YAMB as effectively withdrawn.
 <p>
 <b>ZK-Crypt version 1 (patented) (withdrawn).</b>
 Lubkin and Ryabko appear to state that ZK-Crypt output