Camellia: A 128-Bit Block Cipher Suitable for Multiple Platforms - Design and Analysis
Camellia: A 128-Bit Block Cipher Suitable for Multiple Platforms - Design and Analysis
复制标题
DOI:
10.1007/3-540-44983-3_4
复制
发表时间:
2000-08
期刊:
影响因子:
--
通讯作者:
Kazumaro Aoki;Tetsuya Ichikawa;Masayuki Kanda;M. Matsui;S. Moriai;Junko Nakajima;Toshio Tokita
中科院分区:
文献类型:
--
作者:
Kazumaro Aoki;Tetsuya Ichikawa;Masayuki Kanda;M. Matsui;S. Moriai;Junko Nakajima;Toshio Tokita
We present a new 128-bit block cipher calledCamellia. Camellia supports 128-bit block size and 128-, 192-, and 256-bit keys, i.e., the same interface specifications as the Advanced Encryption Standard (AES). Efficiency on both software and hardware platforms is a remarkable characteristic of Camellia in addition to its high level of security. It is confirmed that Camellia provides strong security against differential and linear cryptanalyses. Compared to the AES finalists, i.e., MARS, RC6, Rijndael, Serpent, and Twofish, Camellia offers at least comparable encryption speed in software and hardware. An optimized implementation of Camellia in assembly language can encrypt on a Pentium III (800MHz) at the rate of more than 276 Mbits per second, which is much faster than the speed of an optimized DES implementation. In addition, a distinguishing feature is its small hardware design. The hardware design, which includes encryption and decryption and key schedule, occupies approximately 11K gates, which is the smallest among all existing 128-bit block ciphers as far as we know.