# What does the strict avalanche criterion mean?

I can build black box ciphers with the following properties:

1. Satisfies SAC, but is trivially weak (a keystream from an LFSR seeded with the key).

2. Does not satisfy SAC, but built from secure primitives (Base64 encode the output of AES).

From 1 you can see that SAC is not sufficient for security. From 2 you can see that SAC is not necessary for security.

Since neither $SAC \implies Security$ and $Security \implies SAC$, what conclusions can you make based on SAC?

• What about: the SAC is useful only in limited context, like internals of a cryptographic primitive?
– fgrieu
Sep 28, 2016 at 17:11