Block cipher/Catalogs/Cipher table
< Block cipher | Catalogs
Jump to navigation
Jump to search
Cipher | Type | Block size | Key size | Rounds | S-boxes | Round function has | Standard in | AES competition | Comment |
---|---|---|---|---|---|---|---|---|---|
AES | SP network | 128 | 128,192,256 | 10 to 14 | one 8*8 | US, 2002 onward | winner | extremely widely used | |
DES | Feistel | 64 | 56 | 16 | 8 6*4 | bit permutation | US, 1976-2002 | obsolete, key too short against brute force | |
Triple DES | Feistel | 64 | 112 or 168 | 48 (3*16) | 8 6*4 | bit permutation | widely used, but being replaced by AES | ||
Blowfish | Feistel | 64 | up to 556 | 16 | 4 8*32, key-dependent | widely used | |||
CAST-128 | Feistel | 64 | 40 to 128 | 16 | 4 8*32, using bent functions | key-dependent rotation | widely used, including PGP | ||
GOST cipher | Feistel | 64 | 256 | 32 | 8 4*4 | rotation | Soviet Union | ||
Skipjack | Feistel, unbalanced | 64 | 80 | 32 | designed by NSA for Clipper chip phones | ||||
IDEA | 64 | 128 | 8 | none | modular multiplication | Europe | |||
TEA | Feistel | 64 | 128 | 32 | none | only shift, XOR, addition | |||
SAFER SK-128 | SP network | 64 | 128 | 8 | PHT | Singapore | |||
SAFER+ | SP network | 128 | 128,192,256 | 8,12 or 15 | PHT | candidate | |||
LOKI | Feistel | 64 | 64 | 16 | LOKI89 is original version, LOKI91 revised | ||||
LOKI97 | Feistel | 128 | 128,192,256 | 16 | two SP network rounds | candidate | |||
Serpent | SP network | 128 | 128,192,256 | 32 | 8 4*4 | finalist | |||
MARS | Feistel-like | 128 | 128,192,256 | 16 | one 9*32 | data-dependent rotation | finalist | designed at IBM | |
CAST-256 | Feistel-like | 128 | 128,192,256 | 48 | 4 8*32, using bent functions | key-dependent rotation | candidate | ||
Twofish | Feistel | 128 | 128,192,256 | 16 | 4 8*8, key-dependent | rotation and PHT | finalist | ||
RC2 | Feistel | 64 | variable | 18 | often used with 40-bit key, for export | ||||
RC5 | Feistel | 64 or 128 | up to 2040 | variable | data-dependent rotation | ||||
RC6 | 128 | 128,192,256 | data-dependent rotation | finalist | |||||
DFC | Feistel | 128 | 128,192,256 | 6 | one 6*32 | candidate | |||
FROG | variable | variable | 8 | candidate | uses key as program, not just as data | ||||
E2 | Feistel | 128 | 128,192,256 | 12 | one 8*8 | candidate | |||
DEAL | Feistel | 128 | 128,192,256 | 6 or 8 | DES as the round function | candidate | |||
Camellia | Feistel | 128 | 128,192,256 | 18 or 24 | Japanese | ||||
SEED | Feistel | 128 | 128 | 16 | 2 8*8 | Korean | |||
CRYPTON | SP network | 128 | 128,192,256 | 12 | candidate | ||||
MAGENTA | Feistel | 128 | 128,192,256 | 6 or 8 | candidate | quickly broken | |||
Hasty Pudding | variable | variable | candidate | tweakable | |||||
Threefish | 256,512,1024 | 256,512,1024 | tweakable, used in Skein hash | ||||||
Whirlpool cipher | SP network | 512 | 512 | 10 | AES-like, used in Whirlpool hash |
"PHT" indicates a pseudo-Hadmard transform.