ARIA (cipher)
From Wikipedia, the free encyclopedia
First published: | 2003 |
---|---|
Derived from: | AES |
Certification: | Korean standard |
Key size(s): | 128, 192, or 256 bits |
Block size(s): | 128 bits |
Structure: | Substitution-permutation network |
Rounds: | 12, 14, or 16 |
Best public cryptanalysis: | |
Linear cryptanalysis can break 7 rounds using 277 known plaintexts | |
In cryptography, ARIA is a block cipher designed in 2003 by a large group of Korean researchers. In 2004, the Korean Agency for Technology and Standards selected it as a standard cryptographic technique.
The algorithm uses a substitution-permutation network structure based on AES. The interface is the same as AES: 128-bit block size with key size of 128, 192, or 256 bits. The number of rounds is 12, 14, or 16, depending on the key size. ARIA uses 2 8×8-bit S-boxes and their inverses in alternate rounds; one of these is the Rijndael S-box.
The key schedule processes the key using a 3-round 256-bit Feistel cipher, with the binary expansion of 1/π as a source of "nothing up my sleeve numbers".
[edit] References
- A. Biryukov, C. De Cannière, J. Lano, B. Preneel, S. B. Örs (2004-01-07). "Security and Performance Analysis of ARIA" (PostScript). Version 1.2 - Final Report. Katholieke Universiteit Leuven. Retrieved on 2007-03-02.
- Wenling Wu, Wentao Zhang, and Dengguo Feng (2006). "Impossible Differential Cryptanalysis of ARIA and Camellia" (PDF). Retrieved on 2007-01-19.