Cryptography Stack Exchange is a question and answer site for software developers, mathematicians and others interested in cryptography. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

The ISAAC site claims it is secure, but I wasn't aware of any trusted 3rd party sources that verified its security.

share|improve this question
up vote 5 down vote accepted

It's actually fairly good. Unlike the previous post it was actually published in Fast software encryption about 15 years ago. It's still being looked at actively and has held up fairly well. The best attack against it was done by Auasson in 08. The major issue is on the way which it is initially seeded.

ISAAC has been partially superseeded by ISAAC+ to deal with some of the issues Aumasson pointed out. It still works fairly well.

For random number generators you can't really "verify" you can say it looks pretty good.

share|improve this answer
note, the difference is only that the first output is biased, the isaac+ algorithm is to simply discard the first set of output after initialization, and the bias goes away. (which is actually done in the reference implementation on the website iirc) – Andrew Hill Jul 19 '15 at 23:58

I had a short look at the page - it contains only some implementations, no specification.

The page ISAAC and RC4 from the same author contains some theoretical elaboration about ISAAC and its relatives IA and IBAA, but I'm not sure if this can be called specification.

Non-existence of a formal specification is a major drawback for anything which claims to be a serious cryptographic algorithm, and might be the deciding reason that nobody really looked at the security of this primitive.

So my recommendation would be to use other, better documented algorithms instead, if security is of importance (and not only speed).

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.