Py (Roo): A Fast and Secure Stream Cipher using Rolling Arrays,” ecrypt submission (2005) [16 citations — 0 self]
Abstract:
Py (pronounced Roo, a shorthand for Kangaroo) is a new stream cipher designed especially for the Ecrypt stream cipher contest. It is based on a new kind of primitive, which we call Rolling Arrays. It also uses various other ideas from many types of ciphers, including variable rotations and permutations. In some sense, this design is a kind of a new type of rotor machine, which is specially designed with operations that are very efficient in software. The allowed stream size is 2 64 bytes in each stream (or 2 40 in the smaller version Py6). The security claims of the cipher are that no key recovery attacks can be performed with complexity smaller than that of exhaustive search, and distinguishing attacks are also impractical with a similar complexity. The speed of the cipher is impressively fast, as it is more than 2.5 times faster than RC4 on a Pentium III (with less than 2.9 cycles/byte when implemented with the API of NESSIE and tested with the NESSIE software). 1
Citations
| 99 | Weakness in the key scheduling Algorithm of RC4 – Fluhrer, Martin, et al. |
| 82 | V.: The Design of Rijndael – Daemen, Rijmen - 2001 |
| 51 | Two practical and provably secure block ciphers: BEAR and LION – Anderson, Biham - 1996 |
| 28 | A Practical Attack on Broadcast RC4 – Mantin, Shamir - 2002 |
| 24 | Cyclic Difference Sets – Baumert - 1971 |
| 21 | Linear Statistical Weakness of Alleged RC4 Keystream Generator – Golic |
| 20 | Tiger: a fast new hash function – Anderson, Biham - 1996 |
| 15 | Serpent: A – Anderson, Biham, et al. - 1998 |
| 8 | Analysis methods for (alleged) RC4 – Knudsen, Meier, et al. - 1998 |
| 4 | Statistical analysis of the alleged RC4 stream cipher – Fluhrer, McGrew - 2000 |
| 1 | An RC4 Cycle that Can’t Happen, Usenet newsgroup sci.crypt – Finney - 1994 |
| 1 | Analysis of the Stream Cipher RC4, M.Sc – Mantin |

