Block cipher/Catalogs/Cipher table
< Block cipher | Catalogs
Jump to navigation
Jump to search
Cipher | Type | Block size | Key size | Rounds | S-boxes | Round function has | Standard in | AES competition | Comment | |
---|---|---|---|---|---|---|---|---|---|---|
AES | SP network | 128 | 128,192,256 | 10 to 14 | one 8*8 | US, 2002 onward | Winner | current US standard, widely used | ||
DES | Feistel | 64 | 56 | 16 | 8 6*4 | bit permutation | US, 1976-2002 | obsolete, key too short against brute force | ||
Blowfish | Feistel | 64 | up to 556 | 16 | 4 8*32, key-dependent | widely used | ||||
CAST-128 | Feistel | 64 | 40 to 128 | 16 | 4 8*32, using bent functions | key-dependent rotation | widely used, including PGP | |||
GOST cipher | Feistel | 64 | 256 | 32 | 8 4*4 | rotation | Soviet Union | |||
Skipjack | Feistel, unbalanced | 64 | 80 | 32 | designed by NSA for Clipper chip phones | |||||
IDEA | 64 | 128 | 8 | none | modular multiplication | Europe | ||||
TEA | Feistel | 64 | 128 | 32 | none | only shift, XOR, addition | ||||
SAFER SK-128 | SP network | 64 | 128 | 8 | pseudo-Hadamard transform | Singapore | ||||
SAFER+ | SP network | 128 | 128,192,256 | pseudo-Hadamard transform | candidate | |||||
LOKI97 | Feistel | 128 | 128,192,256 | 16 | two SP network rounds | candidate | ||||
Serpent | SP network | 128 | 128,192,256 | 32 | 8 4*4 | finalist | ||||
MARS | Feistel-like | 128 | 128,192,256 | 16 | one 9*32 | data-dependent rotation | finalist | designed at IBM | ||
CAST-256 | Feistel-like | 128 | 128,192,256 | 48 | 4 8*32, using bent functions | key-dependent rotation | candidate | |||
Twofish | 128 | 128,192,256 | 16 | key-dependent | pseudo-Hadamard transform | finalist | ||||
RC2 | Feistel | 64 | 18 | often used with 40-bit key, for export | ||||||
RC5 | Feistel | 64 | 128 | data-dependent rotation | ||||||
RC6 | 128 | 128,192,256 | data-dependent rotation | finalist | ||||||
DFC | Feistel | 128 | 128,192,256 | 6 | one 6*32 | candidate | ||||
FROG | variable | variable | 8 | candidate | uses key as program, not just as data | |||||
E2 | 128 | 128,192,256 | candidate | |||||||
DEAL | Feistel | 128 | 128,192,256 | 6 or 8 | DES as the round function | candidate | ||||
CRYPTON | SP network | 128 | 128,192,256 | candidate | ||||||
MAGENTA | 128 | 128,192,256 | candidate | quickly broken | ||||||
Hasty Pudding | variable | variable | candidate | tweakable |