|Key sizes||128 bits|
|Block sizes||64 bits|
|Best public cryptanalysis|
|Differential cryptanalysis can break Nimbus with 256 chosen plaintexts.|
The algorithm uses a 128-bit key. It operates on blocks of 64 bits and consists of 5 rounds of encryption. The round function is exceedingly simple. In each round the block is XORed with a subkey, the order of its bits is reversed, and then it is multiplied mod 264 by another subkey, which is forced to be odd.
|This cryptography-related article is a stub. You can help Wikipedia by expanding it.|