Talk:Serpent (cipher): Difference between revisions
m Signing comment by 79.17.131.38 - ""Security" vs "Security Margin"" |
No edit summary |
||
Line 26: | Line 26: | ||
formal definition of security. The NIST evaluation papers, as well as Ross Anderson himself in his |
formal definition of security. The NIST evaluation papers, as well as Ross Anderson himself in his |
||
book speak of Serpent having "a higher security margin", which roughly means that it is less likely to be broken. <span style="font-size: smaller;" class="autosigned">—Preceding [[Wikipedia:Signatures|unsigned]] comment added by [[Special:Contributions/79.17.131.38|79.17.131.38]] ([[User talk:79.17.131.38|talk]]) 17:54, 23 November 2008 (UTC)</span><!-- Template:UnsignedIP --> <!--Autosigned by SineBot--> |
book speak of Serpent having "a higher security margin", which roughly means that it is less likely to be broken. <span style="font-size: smaller;" class="autosigned">—Preceding [[Wikipedia:Signatures|unsigned]] comment added by [[Special:Contributions/79.17.131.38|79.17.131.38]] ([[User talk:79.17.131.38|talk]]) 17:54, 23 November 2008 (UTC)</span><!-- Template:UnsignedIP --> <!--Autosigned by SineBot--> |
||
== Speed of execution == |
|||
In the article it is stated that Rijndael is faster than Serpent because of the number of rounds used in Rijndael. Here http://www.cl.cam.ac.uk/~rja14/Papers/serpentcase.pdf, Page 3 is is stated that Serpent is much faster when implmented in Hardware. If nobody has contradictory information, I'll change that part of the comparison. -- uhu01 |
Revision as of 18:19, 2 December 2008
![]() | Cryptography: Computer science Unassessed | ||||||||||||
|
Cryptanalysis
Does anyone know of any current cryptanalysis for Serpent?
I came across this white paper Preliminary Cryptanalysis of Reduced-Round Serpent stating something about "...recover the key for Serpent up to nine rounds." and "...how to break six rounds of Serpent..." Zer0Nin3r (talk) 10:43, 9 June 2008 (UTC)
This should go in the article, but I believe the best current known attack against Serpent is for an 11-round reduced variant, see:
- Biham, Dunkelman, Keller (February 2003). "Differential-Linear Cryptanalysis of Serpent" (PDF/PostScript). 10th International Workshop on Fast Software Encryption (FSE '03). Lund: Springer-Verlag. pp. pp.9–21. Retrieved 2007-03-08.
{{cite conference}}
:|pages=
has extra text (help); Unknown parameter|booktitle=
ignored (|book-title=
suggested) (help)CS1 maint: multiple names: authors list (link)
(The full version has 32 rounds...) — Matt Crypto 11:34, 9 June 2008 (UTC)
Security of Serpent
The statement that Serpent is *more secure* than Rijndael is a bit too strong, especially without a formal definition of security. The NIST evaluation papers, as well as Ross Anderson himself in his book speak of Serpent having "a higher security margin", which roughly means that it is less likely to be broken. —Preceding unsigned comment added by 79.17.131.38 (talk) 17:54, 23 November 2008 (UTC)
Speed of execution
In the article it is stated that Rijndael is faster than Serpent because of the number of rounds used in Rijndael. Here http://www.cl.cam.ac.uk/~rja14/Papers/serpentcase.pdf, Page 3 is is stated that Serpent is much faster when implmented in Hardware. If nobody has contradictory information, I'll change that part of the comparison. -- uhu01