141:, a function which takes two inputs – a data block and a subkey – and returns one output of the same size as the data block. In each round, the round function is run on half of the data to be encrypted, and its output is XORed with the other half of the data. This is repeated a fixed number of times, and the final output is the encrypted data. An important advantage of Feistel networks compared to other cipher designs such as
31:
2985:
145:
is that the entire operation is guaranteed to be invertible (that is, encrypted data can be decrypted), even if the round function is not itself invertible. The round function can be made arbitrarily complicated, since it does not need to be designed to be invertible. Furthermore, the
158:. Therefore, the size of the code or circuitry required to implement such a cipher is nearly halved. Unlike substitution-permutation networks, Feistel networks also do not depend on a substitution box that could cause timing side-channels in software implementations.
129:) in 1976. Like other components of the DES, the iterative nature of the Feistel construction makes implementing the cryptosystem in hardware easier (particularly on the hardware available at the time of DES's design).
914:
573:
289:
2965:
2795:
1052:
is an extreme case of an unbalanced
Feistel cipher in which one side is a single bit. This has better provable security than a balanced Feistel cipher but requires more rounds.
769:
719:
658:
968:
The diagram illustrates both encryption and decryption. Note the reversal of the subkey order for decryption; this is the only difference between encryption and decryption.
820:
486:
434:
963:
327:
230:
596:
1028:
1001:
387:
360:
1489:
Zheng, Yuliang; Matsumoto, Tsutomu; Imai, Hideki (1989-08-20). "On the
Construction of Block Ciphers Provably Secure and Not Relying on Any Unproved Hypotheses".
2648:
199:
access to its inverse permutation). Because of this very important result of Luby and
Rackoff, Feistel ciphers are sometimes called Luby–Rackoff block ciphers.
2583:
1664:
195:, while 4 rounds are sufficient to make it a "strong" pseudorandom permutation (which means that it remains pseudorandom even to an adversary who gets
2410:
1766:
97:
ciphers. In a
Feistel cipher, encryption and decryption are very similar operations, and both consist of iteratively running a function called a "
1042:
2400:
1894:
1616:
1541:
1506:
1460:
1061:
2301:
1284:
826:
142:
2563:
2537:
2405:
1083:
Whether the entire cipher is a
Feistel cipher or not, Feistel-like networks can be used as a component of a cipher's design. For example,
2378:
1337:
2641:
1387:
1362:
492:
2547:
1657:
2426:
2844:
2604:
1146:
1071:
A generalized
Feistel algorithm can be used to create strong permutations on small domains of size not a power of two (see
1038:
109:
Many modern symmetric block ciphers are based on
Feistel networks. Feistel networks were first seen commercially in IBM's
2634:
1694:
1403:
Luby, Michael; Rackoff, Charles (April 1988), "How to
Construct Pseudorandom Permutations from Pseudorandom Functions",
1295:
1072:
2960:
2915:
2728:
2490:
1650:
2839:
2507:
2417:
2395:
1708:
2955:
2512:
2368:
2321:
1796:
1199:
3018:
2945:
2935:
2790:
2578:
2460:
2335:
1704:
1131:
235:
202:
Further theoretical work has generalized the construction somewhat and given more precise bounds for security.
192:
126:
122:
82:
1523:
1060:
The
Feistel construction is also used in cryptographic algorithms other than block ciphers. For example, the
180:
analyzed the
Feistel cipher construction and proved that if the round function is a cryptographically secure
2940:
2930:
2733:
2693:
2686:
2676:
2671:
2517:
2306:
1677:
1065:
50:
1563:
Bono, Stephen; Green, Matthew; Stubblefield, Adam; Juels, Ari; Rubin, Aviel; Szydlo, Michael (2005-08-05).
2681:
2609:
2485:
2480:
2432:
2281:
1300:
3013:
2988:
2834:
2780:
2599:
2422:
1859:
1155:
1096:
181:
724:
666:
605:
2950:
2874:
2502:
2385:
2311:
1994:
1974:
98:
776:
442:
395:
2713:
2465:
2442:
1761:
1594:
Morris, Ben; Rogaway, Phillip; Stegers, Till (2009). "How to Encipher Messages on a Small Domain".
1522:
Schneier, Bruce; Kelsey, John (1996-02-21). "Unbalanced Feistel networks and block cipher design".
1175:
1049:
922:
294:
86:
213:
2819:
2803:
2750:
2450:
2358:
2070:
1999:
1969:
1914:
1466:
1242:
1439:
1329:
1322:
2879:
2869:
2740:
2170:
1869:
1829:
1824:
1791:
1751:
1699:
1612:
1537:
1502:
1456:
1420:
1383:
1358:
1333:
1257:
1121:
1116:
1088:
1035:
1031:
90:
581:
121:
in 1973. Feistel networks gained respectability when the U.S. Federal Government adopted the
2814:
2542:
2437:
2316:
2175:
2055:
2024:
1718:
1604:
1529:
1494:
1448:
1412:
1170:
1165:
154:
operations are very similar, even identical in some cases, requiring only a reversal of the
110:
1006:
979:
365:
338:
30:
2389:
2373:
2362:
2296:
2255:
2220:
2150:
2130:
2004:
1884:
1879:
1834:
177:
118:
1564:
2889:
2809:
2770:
2718:
2703:
2527:
2475:
2286:
2210:
2205:
2090:
1839:
1289:
1194:
196:
1595:
3007:
2970:
2925:
2884:
2864:
2760:
2723:
2698:
2522:
2470:
2349:
2331:
2120:
2095:
2085:
1909:
1899:
1746:
1279:
1141:
167:
114:
66:
1470:
2920:
2765:
2755:
2745:
2708:
2657:
2455:
2276:
2240:
2105:
1984:
1939:
1771:
1723:
1673:
1274:
173:
155:
78:
54:
38:
166:
The structure and properties of Feistel ciphers have been extensively analyzed by
1608:
2899:
2065:
2060:
1944:
1064:(OAEP) scheme uses a simple Feistel network to randomize ciphertexts in certain
1091:
is a modified Feistel cipher using a Feistel network in its G permutation, and
1087:
is a Feistel cipher using a three-round Feistel network in its round function,
17:
2859:
2829:
2824:
2785:
2497:
2215:
2155:
2039:
2034:
1979:
1849:
1712:
1204:
151:
147:
1533:
1498:
1424:
2849:
2230:
2225:
2115:
2029:
1924:
1904:
1092:
62:
191:
used as the seed, then 3 rounds are sufficient to make the block cipher a
2894:
2854:
2568:
2532:
2326:
1989:
1864:
1844:
1756:
1232:
1126:
2235:
2185:
2145:
2135:
2080:
2075:
1919:
1728:
1603:. Lecture Notes in Computer Science. Vol. 5677. pp. 286–302.
1528:. Lecture Notes in Computer Science. Vol. 1039. pp. 121–144.
1447:, Lecture Notes in Computer Science, vol. 2729, pp. 513–529,
1209:
1099:) is a non-Feistel block cipher that uses a Feistel-like MIX function.
94:
58:
1493:. Lecture Notes in Computer Science. Vol. 435. pp. 461–480.
1320:
Menezes, Alfred J.; Oorschot, Paul C. van; Vanstone, Scott A. (2001).
909:{\displaystyle L_{i}=R_{i+1}\oplus \operatorname {F} (L_{i+1},K_{i}).}
2775:
2573:
2195:
2190:
2125:
2110:
2100:
2045:
2019:
2014:
2009:
1889:
1874:
1237:
1180:
1160:
1084:
1416:
1452:
2291:
2250:
2200:
2180:
2165:
1954:
1934:
1854:
1819:
1292:
for discrete wavelet transform has pretty much the same structure
2140:
2049:
1964:
1959:
1949:
1929:
1801:
1786:
1262:
1214:
1136:
2630:
1646:
2245:
2160:
1781:
1776:
1565:"Security Analysis of a Cryptographically-Enabled RFID Device"
1252:
1247:
1189:
599:
568:{\displaystyle R_{i+1}=L_{i}\oplus \mathrm {F} (R_{i},K_{i}),}
70:
1110:
29:
976:
Unbalanced Feistel ciphers use a modified structure where
1041:
uses a proprietary unbalanced Feistel cipher to perform
2796:
Cryptographically secure pseudorandom number generator
1009:
982:
925:
829:
779:
727:
669:
608:
584:
495:
445:
398:
368:
341:
297:
238:
216:
125:(a cipher based on Lucifer, with changes made by the
1634:
2908:
2664:
2592:
2556:
2345:
2264:
1810:
1737:
1685:
1438:Patarin, Jacques (October 2003), Boneh, Dan (ed.),
1321:
1022:
995:
957:
908:
814:
763:
713:
652:
590:
567:
480:
428:
381:
354:
335:Split the plaintext block into two equal pieces: (
321:
283:
224:
1328:(Fifth ed.). Taylor & Francis. p.
69:, who did pioneering research while working for
1491:Advances in Cryptology — CRYPTO' 89 Proceedings
2642:
1658:
8:
1572:Proceedings of the USENIX Security Symposium
1034:cipher is an example of such a cipher. The
2649:
2635:
2627:
1665:
1651:
1643:
1639:
1635:
1014:
1008:
987:
981:
946:
933:
924:
894:
875:
847:
834:
828:
797:
784:
778:
726:
696:
677:
668:
635:
616:
607:
583:
553:
540:
528:
519:
500:
494:
469:
450:
444:
397:
373:
367:
346:
340:
296:
284:{\displaystyle K_{0},K_{1},\ldots ,K_{n}}
275:
256:
243:
237:
217:
215:
332:Then the basic operation is as follows:
1589:
1587:
1312:
1079:Feistel networks as a design component
1062:optimal asymmetric encryption padding
7:
1597:Advances in Cryptology - CRYPTO 2009
1441:Advances in Cryptology - CRYPTO 2003
1357:. New York: John Wiley & Sons.
862:
529:
218:
25:
1380:Cryptography: Theory and Practice
1043:challenge–response authentication
764:{\displaystyle i=n,n-1,\ldots ,0}
721:is accomplished by computing for
714:{\displaystyle (R_{n+1},L_{n+1})}
653:{\displaystyle (R_{n+1},L_{n+1})}
143:substitution–permutation networks
81:use the scheme, including the US
73:; it is also commonly known as a
2984:
2983:
1324:Handbook of Applied Cryptography
1285:Substitution–permutation network
291:be the sub-keys for the rounds
2845:Information-theoretic security
1030:are not of equal lengths. The
952:
926:
900:
868:
815:{\displaystyle R_{i}=L_{i+1},}
708:
670:
647:
609:
559:
533:
481:{\displaystyle L_{i+1}=R_{i},}
429:{\displaystyle i=0,1,\dots ,n}
232:be the round function and let
1:
1107:Feistel or modified Feistel:
1039:digital signature transponder
958:{\displaystyle (L_{0},R_{0})}
322:{\displaystyle 0,1,\ldots ,n}
1609:10.1007/978-3-642-03356-8_17
1378:Stinson, Douglas R. (1995).
1296:Format-preserving encryption
1073:format-preserving encryption
225:{\displaystyle \mathrm {F} }
53:used in the construction of
2961:Message authentication code
2916:Cryptographic hash function
2729:Cryptographic hash function
663:Decryption of a ciphertext
101:" a fixed number of times.
3035:
2840:Harvest now, decrypt later
2979:
2956:Post-quantum cryptography
2626:
2548:Time/memory/data tradeoff
1642:
1638:
1405:SIAM Journal on Computing
1382:. Boca Raton: CRC Press.
1066:asymmetric-key encryption
972:Unbalanced Feistel cipher
602:. Then the ciphertext is
137:A Feistel network uses a
47:Luby–Rackoff block cipher
27:Cryptography construction
2946:Quantum key distribution
2936:Authenticated encryption
2791:Random number generation
2336:Whitening transformation
1534:10.1007/3-540-60865-6_49
1525:Fast Software Encryption
1499:10.1007/0-387-34805-0_42
1353:Schneier, Bruce (1996).
965:is the plaintext again.
193:pseudorandom permutation
83:Data Encryption Standard
2941:Public-key cryptography
2931:Symmetric-key algorithm
2734:Key derivation function
2694:Cryptographic primitive
2687:Authentication protocol
2677:Outline of cryptography
2672:History of cryptography
2307:Confusion and diffusion
1103:List of Feistel ciphers
591:{\displaystyle \oplus }
2682:Cryptographic protocol
1024:
997:
959:
910:
816:
765:
715:
654:
592:
569:
482:
430:
383:
356:
323:
285:
226:
34:
2835:End-to-end encryption
2781:Cryptojacking malware
2600:Initialization vector
1228:Generalised Feistel:
1025:
1023:{\displaystyle R_{0}}
998:
996:{\displaystyle L_{0}}
960:
911:
817:
766:
716:
655:
593:
570:
483:
431:
384:
382:{\displaystyle R_{0}}
357:
355:{\displaystyle L_{0}}
324:
286:
227:
182:pseudorandom function
85:, the Soviet/Russian
33:
2951:Quantum cryptography
2875:Trusted timestamping
2379:3-subset MITM attack
1995:Intel Cascade Cipher
1975:Hasty Pudding cipher
1355:Applied Cryptography
1007:
980:
923:
827:
777:
725:
667:
606:
582:
493:
443:
396:
366:
339:
295:
236:
214:
206:Construction details
113:cipher, designed by
89:and the more recent
77:. A large number of
2714:Cryptographic nonce
2418:Differential-linear
51:symmetric structure
2820:Subliminal channel
2804:Pseudorandom noise
2751:Key (cryptography)
2491:Differential-fault
1709:internal mechanics
1020:
993:
955:
906:
812:
761:
711:
650:
588:
565:
478:
426:
379:
352:
319:
281:
222:
65:and cryptographer
57:, named after the
35:
3001:
3000:
2997:
2996:
2880:Key-based routing
2870:Trapdoor function
2741:Digital signature
2622:
2621:
2618:
2617:
2605:Mode of operation
2282:Lai–Massey scheme
1618:978-3-642-03355-1
1543:978-3-540-60865-3
1508:978-0-387-97317-3
1462:978-3-540-40674-7
1301:Lai–Massey scheme
1225:
1224:
1036:Texas Instruments
16:(Redirected from
3026:
2987:
2986:
2815:Insecure channel
2651:
2644:
2637:
2628:
2476:Power-monitoring
2317:Avalanche effect
2025:Khufu and Khafre
1678:security summary
1667:
1660:
1653:
1644:
1640:
1636:
1629:
1628:
1626:
1625:
1602:
1591:
1582:
1581:
1579:
1578:
1569:
1560:
1554:
1553:
1551:
1550:
1519:
1513:
1512:
1486:
1480:
1479:
1478:
1477:
1446:
1435:
1429:
1427:
1400:
1394:
1393:
1375:
1369:
1368:
1350:
1344:
1343:
1327:
1317:
1111:
1029:
1027:
1026:
1021:
1019:
1018:
1002:
1000:
999:
994:
992:
991:
964:
962:
961:
956:
951:
950:
938:
937:
915:
913:
912:
907:
899:
898:
886:
885:
858:
857:
839:
838:
821:
819:
818:
813:
808:
807:
789:
788:
770:
768:
767:
762:
720:
718:
717:
712:
707:
706:
688:
687:
659:
657:
656:
651:
646:
645:
627:
626:
597:
595:
594:
589:
574:
572:
571:
566:
558:
557:
545:
544:
532:
524:
523:
511:
510:
487:
485:
484:
479:
474:
473:
461:
460:
435:
433:
432:
427:
388:
386:
385:
380:
378:
377:
361:
359:
358:
353:
351:
350:
328:
326:
325:
320:
290:
288:
287:
282:
280:
279:
261:
260:
248:
247:
231:
229:
228:
223:
221:
162:Theoretical work
21:
3034:
3033:
3029:
3028:
3027:
3025:
3024:
3023:
3019:Feistel ciphers
3004:
3003:
3002:
2993:
2975:
2904:
2660:
2655:
2614:
2588:
2557:Standardization
2552:
2481:Electromagnetic
2433:Integral/Square
2390:Piling-up lemma
2374:Biclique attack
2363:EFF DES cracker
2347:
2341:
2272:Feistel network
2260:
1885:CIPHERUNICORN-E
1880:CIPHERUNICORN-A
1812:
1806:
1739:
1733:
1687:
1681:
1671:
1633:
1632:
1623:
1621:
1619:
1600:
1593:
1592:
1585:
1576:
1574:
1567:
1562:
1561:
1557:
1548:
1546:
1544:
1521:
1520:
1516:
1509:
1488:
1487:
1483:
1475:
1473:
1463:
1444:
1437:
1436:
1432:
1417:10.1137/0217022
1402:
1401:
1397:
1390:
1377:
1376:
1372:
1365:
1352:
1351:
1347:
1340:
1319:
1318:
1314:
1309:
1271:
1226:
1105:
1081:
1058:
1010:
1005:
1004:
983:
978:
977:
974:
942:
929:
921:
920:
890:
871:
843:
830:
825:
824:
793:
780:
775:
774:
723:
722:
692:
673:
665:
664:
631:
612:
604:
603:
580:
579:
549:
536:
515:
496:
491:
490:
465:
446:
441:
440:
394:
393:
392:For each round
369:
364:
363:
342:
337:
336:
293:
292:
271:
252:
239:
234:
233:
212:
211:
208:
189:
178:Charles Rackoff
164:
135:
119:Don Coppersmith
107:
75:Feistel network
45:(also known as
28:
23:
22:
18:Feistel network
15:
12:
11:
5:
3032:
3030:
3022:
3021:
3016:
3006:
3005:
2999:
2998:
2995:
2994:
2992:
2991:
2980:
2977:
2976:
2974:
2973:
2968:
2966:Random numbers
2963:
2958:
2953:
2948:
2943:
2938:
2933:
2928:
2923:
2918:
2912:
2910:
2906:
2905:
2903:
2902:
2897:
2892:
2890:Garlic routing
2887:
2882:
2877:
2872:
2867:
2862:
2857:
2852:
2847:
2842:
2837:
2832:
2827:
2822:
2817:
2812:
2810:Secure channel
2807:
2801:
2800:
2799:
2788:
2783:
2778:
2773:
2771:Key stretching
2768:
2763:
2758:
2753:
2748:
2743:
2738:
2737:
2736:
2731:
2721:
2719:Cryptovirology
2716:
2711:
2706:
2704:Cryptocurrency
2701:
2696:
2691:
2690:
2689:
2679:
2674:
2668:
2666:
2662:
2661:
2656:
2654:
2653:
2646:
2639:
2631:
2624:
2623:
2620:
2619:
2616:
2615:
2613:
2612:
2607:
2602:
2596:
2594:
2590:
2589:
2587:
2586:
2581:
2576:
2571:
2566:
2560:
2558:
2554:
2553:
2551:
2550:
2545:
2540:
2535:
2530:
2525:
2520:
2515:
2510:
2505:
2500:
2495:
2494:
2493:
2488:
2483:
2478:
2473:
2463:
2458:
2453:
2448:
2440:
2435:
2430:
2423:Distinguishing
2420:
2415:
2414:
2413:
2408:
2403:
2393:
2383:
2382:
2381:
2376:
2366:
2355:
2353:
2343:
2342:
2340:
2339:
2329:
2324:
2319:
2314:
2309:
2304:
2299:
2294:
2289:
2287:Product cipher
2284:
2279:
2274:
2268:
2266:
2262:
2261:
2259:
2258:
2253:
2248:
2243:
2238:
2233:
2228:
2223:
2218:
2213:
2208:
2203:
2198:
2193:
2188:
2183:
2178:
2173:
2168:
2163:
2158:
2153:
2148:
2143:
2138:
2133:
2128:
2123:
2118:
2113:
2108:
2103:
2098:
2093:
2088:
2083:
2078:
2073:
2068:
2063:
2058:
2053:
2042:
2037:
2032:
2027:
2022:
2017:
2012:
2007:
2002:
1997:
1992:
1987:
1982:
1977:
1972:
1967:
1962:
1957:
1952:
1947:
1942:
1937:
1932:
1927:
1922:
1917:
1915:Cryptomeria/C2
1912:
1907:
1902:
1897:
1892:
1887:
1882:
1877:
1872:
1867:
1862:
1857:
1852:
1847:
1842:
1837:
1832:
1827:
1822:
1816:
1814:
1808:
1807:
1805:
1804:
1799:
1794:
1789:
1784:
1779:
1774:
1769:
1764:
1759:
1754:
1749:
1743:
1741:
1735:
1734:
1732:
1731:
1726:
1721:
1716:
1702:
1697:
1691:
1689:
1683:
1682:
1672:
1670:
1669:
1662:
1655:
1647:
1631:
1630:
1617:
1583:
1555:
1542:
1514:
1507:
1481:
1461:
1453:10.1007/b11817
1430:
1411:(2): 373–386,
1395:
1388:
1370:
1363:
1345:
1339:978-0849385230
1338:
1311:
1310:
1308:
1305:
1304:
1303:
1298:
1293:
1290:Lifting scheme
1287:
1282:
1277:
1270:
1267:
1266:
1265:
1260:
1255:
1250:
1245:
1240:
1235:
1223:
1222:
1218:
1217:
1212:
1207:
1202:
1197:
1192:
1185:
1184:
1183:
1178:
1173:
1168:
1163:
1158:
1151:
1150:
1149:
1144:
1139:
1134:
1129:
1124:
1119:
1109:
1104:
1101:
1080:
1077:
1057:
1054:
1017:
1013:
990:
986:
973:
970:
954:
949:
945:
941:
936:
932:
928:
917:
916:
905:
902:
897:
893:
889:
884:
881:
878:
874:
870:
867:
864:
861:
856:
853:
850:
846:
842:
837:
833:
822:
811:
806:
803:
800:
796:
792:
787:
783:
760:
757:
754:
751:
748:
745:
742:
739:
736:
733:
730:
710:
705:
702:
699:
695:
691:
686:
683:
680:
676:
672:
649:
644:
641:
638:
634:
630:
625:
622:
619:
615:
611:
587:
576:
575:
564:
561:
556:
552:
548:
543:
539:
535:
531:
527:
522:
518:
514:
509:
506:
503:
499:
488:
477:
472:
468:
464:
459:
456:
453:
449:
425:
422:
419:
416:
413:
410:
407:
404:
401:
376:
372:
349:
345:
329:respectively.
318:
315:
312:
309:
306:
303:
300:
278:
274:
270:
267:
264:
259:
255:
251:
246:
242:
220:
207:
204:
187:
168:cryptographers
163:
160:
139:round function
134:
131:
106:
103:
99:round function
43:Feistel cipher
26:
24:
14:
13:
10:
9:
6:
4:
3:
2:
3031:
3020:
3017:
3015:
3012:
3011:
3009:
2990:
2982:
2981:
2978:
2972:
2971:Steganography
2969:
2967:
2964:
2962:
2959:
2957:
2954:
2952:
2949:
2947:
2944:
2942:
2939:
2937:
2934:
2932:
2929:
2927:
2926:Stream cipher
2924:
2922:
2919:
2917:
2914:
2913:
2911:
2907:
2901:
2898:
2896:
2893:
2891:
2888:
2886:
2885:Onion routing
2883:
2881:
2878:
2876:
2873:
2871:
2868:
2866:
2865:Shared secret
2863:
2861:
2858:
2856:
2853:
2851:
2848:
2846:
2843:
2841:
2838:
2836:
2833:
2831:
2828:
2826:
2823:
2821:
2818:
2816:
2813:
2811:
2808:
2805:
2802:
2797:
2794:
2793:
2792:
2789:
2787:
2784:
2782:
2779:
2777:
2774:
2772:
2769:
2767:
2764:
2762:
2761:Key generator
2759:
2757:
2754:
2752:
2749:
2747:
2744:
2742:
2739:
2735:
2732:
2730:
2727:
2726:
2725:
2724:Hash function
2722:
2720:
2717:
2715:
2712:
2710:
2707:
2705:
2702:
2700:
2699:Cryptanalysis
2697:
2695:
2692:
2688:
2685:
2684:
2683:
2680:
2678:
2675:
2673:
2670:
2669:
2667:
2663:
2659:
2652:
2647:
2645:
2640:
2638:
2633:
2632:
2629:
2625:
2611:
2608:
2606:
2603:
2601:
2598:
2597:
2595:
2591:
2585:
2582:
2580:
2577:
2575:
2572:
2570:
2567:
2565:
2562:
2561:
2559:
2555:
2549:
2546:
2544:
2541:
2539:
2536:
2534:
2531:
2529:
2526:
2524:
2521:
2519:
2516:
2514:
2511:
2509:
2506:
2504:
2503:Interpolation
2501:
2499:
2496:
2492:
2489:
2487:
2484:
2482:
2479:
2477:
2474:
2472:
2469:
2468:
2467:
2464:
2462:
2459:
2457:
2454:
2452:
2449:
2447:
2446:
2441:
2439:
2436:
2434:
2431:
2428:
2424:
2421:
2419:
2416:
2412:
2409:
2407:
2404:
2402:
2399:
2398:
2397:
2394:
2391:
2387:
2384:
2380:
2377:
2375:
2372:
2371:
2370:
2367:
2364:
2360:
2357:
2356:
2354:
2351:
2350:cryptanalysis
2344:
2337:
2333:
2332:Key whitening
2330:
2328:
2325:
2323:
2320:
2318:
2315:
2313:
2310:
2308:
2305:
2303:
2300:
2298:
2295:
2293:
2290:
2288:
2285:
2283:
2280:
2278:
2275:
2273:
2270:
2269:
2267:
2263:
2257:
2254:
2252:
2249:
2247:
2244:
2242:
2239:
2237:
2234:
2232:
2229:
2227:
2224:
2222:
2219:
2217:
2214:
2212:
2209:
2207:
2204:
2202:
2199:
2197:
2194:
2192:
2189:
2187:
2184:
2182:
2179:
2177:
2174:
2172:
2169:
2167:
2164:
2162:
2159:
2157:
2154:
2152:
2149:
2147:
2144:
2142:
2139:
2137:
2134:
2132:
2129:
2127:
2124:
2122:
2121:New Data Seal
2119:
2117:
2114:
2112:
2109:
2107:
2104:
2102:
2099:
2097:
2094:
2092:
2089:
2087:
2084:
2082:
2079:
2077:
2074:
2072:
2069:
2067:
2064:
2062:
2059:
2057:
2054:
2051:
2047:
2043:
2041:
2038:
2036:
2033:
2031:
2028:
2026:
2023:
2021:
2018:
2016:
2013:
2011:
2008:
2006:
2003:
2001:
1998:
1996:
1993:
1991:
1988:
1986:
1983:
1981:
1978:
1976:
1973:
1971:
1968:
1966:
1963:
1961:
1958:
1956:
1953:
1951:
1948:
1946:
1943:
1941:
1938:
1936:
1933:
1931:
1928:
1926:
1923:
1921:
1918:
1916:
1913:
1911:
1908:
1906:
1903:
1901:
1898:
1896:
1893:
1891:
1888:
1886:
1883:
1881:
1878:
1876:
1873:
1871:
1868:
1866:
1863:
1861:
1860:BEAR and LION
1858:
1856:
1853:
1851:
1848:
1846:
1843:
1841:
1838:
1836:
1833:
1831:
1828:
1826:
1823:
1821:
1818:
1817:
1815:
1809:
1803:
1800:
1798:
1795:
1793:
1790:
1788:
1785:
1783:
1780:
1778:
1775:
1773:
1770:
1768:
1765:
1763:
1760:
1758:
1755:
1753:
1750:
1748:
1745:
1744:
1742:
1736:
1730:
1727:
1725:
1722:
1720:
1717:
1714:
1710:
1706:
1703:
1701:
1698:
1696:
1693:
1692:
1690:
1684:
1679:
1675:
1674:Block ciphers
1668:
1663:
1661:
1656:
1654:
1649:
1648:
1645:
1641:
1637:
1620:
1614:
1610:
1606:
1599:
1598:
1590:
1588:
1584:
1573:
1566:
1559:
1556:
1545:
1539:
1535:
1531:
1527:
1526:
1518:
1515:
1510:
1504:
1500:
1496:
1492:
1485:
1482:
1472:
1468:
1464:
1458:
1454:
1450:
1443:
1442:
1434:
1431:
1426:
1422:
1418:
1414:
1410:
1406:
1399:
1396:
1391:
1389:0-8493-8521-0
1385:
1381:
1374:
1371:
1366:
1364:0-471-12845-7
1360:
1356:
1349:
1346:
1341:
1335:
1331:
1326:
1325:
1316:
1313:
1306:
1302:
1299:
1297:
1294:
1291:
1288:
1286:
1283:
1281:
1280:Stream cipher
1278:
1276:
1273:
1272:
1268:
1264:
1261:
1259:
1256:
1254:
1251:
1249:
1246:
1244:
1241:
1239:
1236:
1234:
1231:
1230:
1229:
1221:
1216:
1213:
1211:
1208:
1206:
1203:
1201:
1198:
1196:
1193:
1191:
1188:
1187:
1186:
1182:
1179:
1177:
1174:
1172:
1169:
1167:
1164:
1162:
1159:
1157:
1154:
1153:
1152:
1148:
1145:
1143:
1142:GOST 28147-89
1140:
1138:
1135:
1133:
1130:
1128:
1125:
1123:
1120:
1118:
1115:
1114:
1113:
1112:
1108:
1102:
1100:
1098:
1094:
1090:
1086:
1078:
1076:
1074:
1069:
1067:
1063:
1055:
1053:
1051:
1050:Thorp shuffle
1046:
1044:
1040:
1037:
1033:
1015:
1011:
988:
984:
971:
969:
966:
947:
943:
939:
934:
930:
903:
895:
891:
887:
882:
879:
876:
872:
865:
859:
854:
851:
848:
844:
840:
835:
831:
823:
809:
804:
801:
798:
794:
790:
785:
781:
773:
772:
771:
758:
755:
752:
749:
746:
743:
740:
737:
734:
731:
728:
703:
700:
697:
693:
689:
684:
681:
678:
674:
661:
642:
639:
636:
632:
628:
623:
620:
617:
613:
601:
585:
562:
554:
550:
546:
541:
537:
525:
520:
516:
512:
507:
504:
501:
497:
489:
475:
470:
466:
462:
457:
454:
451:
447:
439:
438:
437:
423:
420:
417:
414:
411:
408:
405:
402:
399:
390:
374:
370:
347:
343:
333:
330:
316:
313:
310:
307:
304:
301:
298:
276:
272:
268:
265:
262:
257:
253:
249:
244:
240:
205:
203:
200:
198:
194:
190:
183:
179:
175:
171:
169:
161:
159:
157:
153:
149:
144:
140:
132:
130:
128:
124:
120:
116:
115:Horst Feistel
112:
104:
102:
100:
96:
92:
88:
84:
80:
79:block ciphers
76:
72:
68:
67:Horst Feistel
64:
60:
56:
55:block ciphers
52:
48:
44:
40:
32:
19:
3014:Cryptography
2921:Block cipher
2766:Key schedule
2756:Key exchange
2746:Kleptography
2709:Cryptosystem
2658:Cryptography
2508:Partitioning
2466:Side-channel
2444:
2411:Higher-order
2396:Differential
2277:Key schedule
2271:
1622:. Retrieved
1596:
1575:. Retrieved
1571:
1558:
1547:. Retrieved
1524:
1517:
1490:
1484:
1474:, retrieved
1440:
1433:
1408:
1404:
1398:
1379:
1373:
1354:
1348:
1323:
1315:
1275:Cryptography
1227:
1219:
1106:
1082:
1070:
1059:
1047:
975:
967:
918:
662:
577:
391:
334:
331:
209:
201:
185:
174:Michael Luby
172:
165:
156:key schedule
138:
136:
108:
74:
46:
42:
39:cryptography
36:
2909:Mathematics
2900:Mix network
2593:Utilization
2579:NSA Suite B
2564:AES process
2513:Rubber-hose
2451:Related-key
2359:Brute-force
1738:Less common
3008:Categories
2860:Ciphertext
2830:Decryption
2825:Encryption
2786:Ransomware
2543:Chi-square
2461:Rotational
2401:Impossible
2322:Block size
2216:Spectr-H64
2040:Ladder-DES
2035:Kuznyechik
1980:Hierocrypt
1850:BassOmatic
1813:algorithms
1740:algorithms
1713:Triple DES
1688:algorithms
1624:2017-11-21
1577:2017-11-21
1549:2017-11-21
1476:2009-07-27
1307:References
1205:Triple DES
1056:Other uses
436:, compute
152:decryption
148:encryption
2850:Plaintext
2518:Black-bag
2438:Boomerang
2427:Known-key
2406:Truncated
2231:Threefish
2226:SXAL/MBAL
2116:MultiSwap
2071:MacGuffin
2030:KN-Cipher
1970:Grand Cru
1925:CS-Cipher
1905:COCONUT98
1425:0097-5397
1243:MacGuffin
1095:(part of
1093:Threefish
1068:schemes.
866:
860:⊕
753:…
744:−
586:⊕
526:⊕
418:…
311:…
266:…
63:physicist
2989:Category
2895:Kademlia
2855:Codetext
2798:(CSPRNG)
2569:CRYPTREC
2533:Weak key
2486:Acoustic
2327:Key size
2171:Red Pike
1990:IDEA NXT
1870:Chiasmus
1865:CAST-256
1845:BaseKing
1830:Akelarre
1825:Adiantum
1792:Skipjack
1757:CAST-128
1752:Camellia
1700:Blowfish
1471:20273458
1269:See also
1258:Skipjack
1233:CAST-256
1127:CAST-128
1122:Camellia
1117:Blowfish
1089:Skipjack
1032:Skipjack
91:Blowfish
2665:General
2610:Padding
2528:Rebound
2236:Treyfer
2186:SAVILLE
2146:PRESENT
2136:NOEKEON
2081:MAGENTA
2076:Madryga
2056:Lucifer
1920:CRYPTON
1729:Twofish
1719:Serpent
1210:Twofish
1171:MAGENTA
1166:Lucifer
184:, with
111:Lucifer
105:History
95:Twofish
49:) is a
2776:Keygen
2574:NESSIE
2523:Davies
2471:Timing
2386:Linear
2346:Attack
2265:Design
2256:Zodiac
2221:Square
2196:SHACAL
2191:SC2000
2151:Prince
2131:Nimbus
2126:NewDES
2111:MULTI2
2101:MISTY1
2044:LOKI (
2020:KHAZAD
2015:KeeLoq
2010:KASUMI
2005:Kalyna
1890:CLEFIA
1875:CIKS-1
1835:Anubis
1686:Common
1615:
1540:
1505:
1469:
1459:
1423:
1386:
1361:
1336:
1238:CLEFIA
1220:
1181:MISTY1
1161:LOKI97
1156:KASUMI
1085:MISTY1
598:means
578:where
197:oracle
133:Design
61:-born
59:German
2806:(PRN)
2456:Slide
2312:Round
2297:P-box
2292:S-box
2251:XXTEA
2211:Speck
2206:Simon
2201:SHARK
2181:SAFER
2166:REDOC
2091:Mercy
2050:89/91
2000:Iraqi
1965:G-DES
1955:FEA-M
1935:DES-X
1900:Cobra
1855:BATON
1840:Ascon
1820:3-Way
1811:Other
1601:(PDF)
1568:(PDF)
1467:S2CID
1445:(PDF)
1195:Simon
1097:Skein
919:Then
2584:CNSA
2443:Mod
2369:MITM
2141:NUSH
2096:MESH
2086:MARS
1960:FROG
1950:FEAL
1930:DEAL
1910:Crab
1895:CMEA
1802:XTEA
1787:SEED
1767:IDEA
1762:GOST
1747:ARIA
1613:ISBN
1538:ISBN
1503:ISBN
1457:ISBN
1421:ISSN
1384:ISBN
1359:ISBN
1334:ISBN
1263:SMS4
1215:XTEA
1176:MARS
1137:FEAL
1048:The
1003:and
210:Let
176:and
150:and
117:and
93:and
87:GOST
41:, a
2538:Tau
2498:XSL
2302:SPN
2246:xmx
2241:UES
2176:S-1
2161:RC2
2106:MMB
1985:ICE
1940:DFC
1797:TEA
1782:RC6
1777:RC5
1772:LEA
1724:SM4
1705:DES
1695:AES
1605:doi
1530:doi
1495:doi
1449:doi
1413:doi
1330:251
1253:RC6
1248:RC2
1200:TEA
1190:RC5
1147:ICE
1132:DES
1075:).
600:XOR
389:).
127:NSA
123:DES
71:IBM
37:In
3010::
2066:M8
2061:M6
2048:,
2046:97
1945:E2
1711:,
1611:.
1586:^
1570:.
1536:.
1501:.
1465:,
1455:,
1419:,
1409:17
1407:,
1332:.
1045:.
660:.
362:,
170:.
2650:e
2643:t
2636:v
2445:n
2429:)
2425:(
2392:)
2388:(
2365:)
2361:(
2352:)
2348:(
2338:)
2334:(
2156:Q
2052:)
1715:)
1707:(
1680:)
1676:(
1666:e
1659:t
1652:v
1627:.
1607::
1580:.
1552:.
1532::
1511:.
1497::
1451::
1428:.
1415::
1392:.
1367:.
1342:.
1016:0
1012:R
989:0
985:L
953:)
948:0
944:R
940:,
935:0
931:L
927:(
904:.
901:)
896:i
892:K
888:,
883:1
880:+
877:i
873:L
869:(
863:F
855:1
852:+
849:i
845:R
841:=
836:i
832:L
810:,
805:1
802:+
799:i
795:L
791:=
786:i
782:R
759:0
756:,
750:,
747:1
741:n
738:,
735:n
732:=
729:i
709:)
704:1
701:+
698:n
694:L
690:,
685:1
682:+
679:n
675:R
671:(
648:)
643:1
640:+
637:n
633:L
629:,
624:1
621:+
618:n
614:R
610:(
563:,
560:)
555:i
551:K
547:,
542:i
538:R
534:(
530:F
521:i
517:L
513:=
508:1
505:+
502:i
498:R
476:,
471:i
467:R
463:=
458:1
455:+
452:i
448:L
424:n
421:,
415:,
412:1
409:,
406:0
403:=
400:i
375:0
371:R
348:0
344:L
317:n
314:,
308:,
305:1
302:,
299:0
277:n
273:K
269:,
263:,
258:1
254:K
250:,
245:0
241:K
219:F
188:i
186:K
20:)
Text is available under the Creative Commons Attribution-ShareAlike License. Additional terms may apply.
