I have come up with an encryption algorithm and I am looking for a place to possibly publish it. Any ideas?


First, and I know this isn't exactly the answer you're seeking, but I'd mull over it for a while. Hopefully you have read Schneier's Memo to the Amateur Cipher Designer; it speaks the truth.

In short, before you try to go the route of publishing your algorithm, here are some things you should consider:

  1. What makes your scheme compelling to study? Is it more secure or more efficient than already-existing schemes like AES, Salsa20, Sosemanuk, ...? Is it interesting from a theoretical point of view? Does it solve some heretofore difficult problem? If none of these things, you might have difficulty generating interest in it.
  2. What analyses have you done already? Does your scheme exhibit proper diffusion, e.g. does it possess a good avalanche effect? Do you have some proof of security contingent on the difficulty of another cipher/problem? (This is often not the case for encryption schemes, but it could have such a thing.) Have you verified that your scheme resists common cryptanalytic techniques like differential and linear cryptanalysis?
  3. Are you prepared to justify everything in your design? And I do mean everything: cryptographers want to know details. Why did you do this, why did you do that, how did you generate those constants, could the constants be better? Why not improve on your design in such-and-such maybe-or-maybe-not-obvious way? How's your scheme's efficiency? Good, bad? Does the security level it provides justify its efficiency?
  4. Who else has looked at your scheme? What are their credentials? Like Schneier says, anyone can make a cipher they themselves cannot break; the real test is having others try.

That said, you might already have considered all of these things and more, in which case I apologize profusely. Supposing you have, where can you publish it?

If you're more amateurish and looking for general community input, I'd pick somewhere like the /r/crypto subreddit and maybe try to hang around some other crypto-related spots on the web. If you're related with a university in some way, you might be able to track down cryptology researchers at yours, depending on your position and so forth.

If you're talking about more prestigious academia-related spots, I'd go with one of the IACR publications, where a great deal of cryptography papers are published. For general preprint hosting, almost all papers are submitted (at some point or another) to the Cryptology ePrint Archive, also ran by IACR. If you're familiar with academia, this is an arXiv-esque site for cryptology specifically.

  • $\begingroup$ For 2, you could be more clear that that's usually not the case for symmetric encryption $\hspace{1.23 in}$ and usually is the case for asymmetric encryption. $\;$ $\endgroup$ – user991 Oct 14 '13 at 3:53
  • 1
    $\begingroup$ IMO suggesting reddit (or even this board) for publishing is debatable at best. While there are many smart people and field experts posting, it's unlikely anyone will do a serious cryptanalysis of dozens or even hundreds of manhours. They will mostly point out the easy attacks/flaws/errors. ePrint Archive is probably the best shot at getting some qualified feedback, but their acceptance criteria include similar criteria to what Schneier wrote in his memo: it has to be interresting, and there has to be a proof or a convincing arguement. Then someone might read it. $\endgroup$ – tylo Oct 14 '13 at 13:29
  • 2
    $\begingroup$ @tylo: I mean publishing in an amateur, "get it out there" sense, not publishing in an academic sense (which was the next paragraph). If you're brand-new to cryptography, and your algorithm is mostly a tool for learning, your chances for getting it published in a journal are pretty slim... and if what you're mostly wanting is just general feedback, a place like the crypto subreddit works great. $\endgroup$ – Reid Oct 14 '13 at 16:02
  • 1
    $\begingroup$ You're right about that, but I wouldn't call that "publishing". However, if you are confident that your design is somewhat new and interesting and secure (worth publishing on academic level), it could be risky to put it on the public Internet. These platforms are great if you got a question or want feedback to a general idea, but no one is going to give you credit for any brilliant idea. $\endgroup$ – tylo Oct 15 '13 at 9:26

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.