Take the 2-minute tour ×
Cryptography Stack Exchange is a question and answer site for software developers, mathematicians and others interested in cryptography. It's 100% free, no registration required.

While reading NIST SP 800-90A, "Recommendation for Random Number Generation Using Deterministic Random Bit Generators", I noted that no stream cipher was included among the various specified solutions.

I also noted that, at least as far as I could tell from the list of other NIST SP 800 series publications, no stream ciphers seem to be currently approved or recommended by NIST.

On the other hand, a set of stream ciphers (MUGI, SNOW 2.0, Rabbit, Decimv2, K2) appear to be currently standardized in ISO/IEC 18033-4:2011.

So my question is:

  • What could be the reasons for NIST to apparently ignore stream ciphers?
  • Is it due to the past failure of any stream ciphers to pass the NESSIE project validation, or is it simply due to reduced interest in dedicated stream ciphers, as compared to stream cipher constructions based on block ciphers (CTR / OFB mode)?
share|improve this question
1  
look estream project ecrypt.eu.org/stream –  ir01 Jun 30 '13 at 12:31
    
thanks for estream derived portfolio while i only mentionned stream ciphers standardized by ISO. it is strange for me that no stream cipher appears approved by nist for PRG or for encryption –  william_fr Jun 30 '13 at 20:49
add comment

1 Answer 1

up vote 5 down vote accepted

I don't know, but block-cipher based modes of operation have seen a lot more scrutiny. AES in CTR mode has been vetted much more thoroughly than any of those stream ciphers you mention. Moreover, those stream ciphers do not offer compelling benefits over AES-CTR mode. Therefore, it seems to me it would be entirely reasonable to focus on block-cipher based modes of operation.

share|improve this answer
    
thanks for answer & post update with missed URL links. I think you're right and nist might not consider a major interest for stream ciphers. this is not a minor concern according to nist rôle. –  william_fr Jul 1 '13 at 10:03
    
Why the Alternating Step Generator is not used more is beyond me, there has been no public cryptanalysis(break) of this generator since it was published in 1987,26 years ago, that is long time to stand up to public scrutiny. It may be un-crackable as long as the key length is large enough, it is an amazingly simple algorithm. –  William Hird Jul 8 '13 at 19:09
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.