This article relies largely or entirely on a single source. (February 2017)
|First published||2006 (declassified; standardized March 21, 2012)|
|Key sizes||128 bits|
|Block sizes||128 bits|
|Structure||unbalanced Feistel network|
|Best public cryptanalysis|
|linear and differential attacks against 22 rounds|
SMS4 was a proposed cipher to be used in IEEE 802.11i standard, but has so far been rejected by ISO. One of the reasons for the rejection has been opposition to the WAPI fast-track proposal by the IEEE.
The SMS4 algorithm was invented by Prof. LU Shu-wang (吕述望). The algorithm was declassified in January, 2006. A few details of the SMS4 cipher are:
- It has a block size of 128 bits.
- It uses an 8-bit S-box.
- The key size is 128 bits.
- The only operations used are XOR, 32-bit circular shifts and S-Box applications
- Encryption or decryption of one block of data is composed of 32 rounds.
- Each round updates a quarter of the internal state (i.e., 32 bits).
- A non-linear key schedule is used to produce the round keys.
- Decryption uses the same round keys as for encryption, except that they are in reversed order.
Terms and Definitions
Word and Byte
Define as a vector set of e bits.
is a word.
is a byte.
S-box is fixed for 8-bit input and 8-bit output, noted as Sbox().
Keys and Key Parameters
The length of encryption keys are 128-bit, represented as , in which is a word.
A round key is represented as ,where each is a word. It is generated by the encryption key.
is a system parameter.
is a fixed parameter, used to generate .
and are words, used for extension of the algorithm.
On Mar 21, 2012, the Chinese government published the industrial standard <GM/T 0002-2012 SM4 Block Cipher Algorithm Standard>, officially renaming SMS4 to SM4.