While reading NIST SP 800-90A, "Recommendation for Random Number Generation Using Deterministic Random Bit Generators", I noted that no stream cipher was included among the various specified solutions.
I also noted that, at least as far as I could tell from the list of other NIST SP 800 series publications, no stream ciphers seem to be currently approved or recommended by NIST.
On the other hand, a set of stream ciphers (MUGI, SNOW 2.0, Rabbit, Decimv2, K2) appear to be currently standardized in ISO/IEC 18033-4:2011.
So my question is:
- What could be the reasons for NIST to apparently ignore stream ciphers?
- Is it due to the past failure of any stream ciphers to pass the NESSIE project validation, or is it simply due to reduced interest in dedicated stream ciphers, as compared to stream cipher constructions based on block ciphers (CTR / OFB mode)?