Jump to content

Cryptomeria cipher: Difference between revisions

From Wikipedia, the free encyclopedia
Content deleted Content added
Line 65: Line 65:
{{Crypto navbox | block}}
{{Crypto navbox | block}}


[[Category:Block ciphers]]
[[Category:Broken block ciphers]]


{{crypto-stub}}
{{crypto-stub}}

Revision as of 13:51, 27 August 2009

Cryptomeria cipher
The Feistel function of the Cryptomeria cipher algorithm.
General
Designers4C Entity
First published2003
Derived fromDES
Related toCSS
Cipher detail
Key sizes56 bits
Block sizes64 bits
StructureFeistel network
Rounds10

The Cryptomeria cipher, commonly referred to as C2, is a proprietary block cipher defined and licensed by the 4C Entity. It is the successor to CSS algorithm (used for DVD-Video) and was designed for the CPRM/CPPM Digital Rights Management scheme which are used by DRM-restricted Secure Digital cards and DVD-Audio discs.

Cipher details

The C2 symmetric key algorithm is a 10-round Feistel cipher. Like DES, it has a key size of 56 bits and a block size of 64 bits. The encryption and decryption algorithms are available for peer review, but implementations require the so-called "secret constant", the values of the substitution boxes, which are only available under a license from the 4C Entity.

No cryptanalytic attacks on the cipher have been published as of December 2006.

Distributed brute force cracking effort

Following an announcement by Japanese HDTV broadcasters that they would start broadcasting programs with the copy-once broadcast flag starting with 2004-04-05, a distributed Cryptomeria cipher brute force cracking effort was launched on 2003-12-21. To enforce the broadcast flag, digital video recorders employ CPRM-compatible storage devices, which the project aimed to circumvent. However, the project was ended and declared a failure on 2004-03-08 after searching the entire 56-bit keyspace, failing to turn up a valid key for unknown reasons.[1] Because the attack was based on S-box values from DVD-Audio, it was suggested that CPRM may use different S-boxes.[2]

References

  1. ^ "Distributed C2 Brute Force Attack: Status Page". Retrieved 2006-08-14.
    "C2 Brute Force Crack - team timecop". Archived version of cracking team's English web site. Retrieved 2006-10-30.
  2. ^ "Discussion about the attack (Archived)". Retrieved 2006-10-30.

Citations covering the entire article