1
$\begingroup$

Wikipedia claims key length can be very big in this cipher, so I assume it can offer a million bits of security provided entropy of key is the same?

Of course I can SHA-256 hash the key to allow any key sizes for AES... but it defeats the whole purpose of having such large entropy when the security is less.

So what is the maximum level? For instance, AES-256 provides a 256 bit security level. I don't want it to wrap the keys or diminish its security/entropy.

Wikipedia and most sources are not clear about it.

$\endgroup$
  • 2
    $\begingroup$ If sources are not clear about it, you should assume that it has not received a great deal of cryptographic scrutiny and you should have no confidence in any security claims. In other words: Don't use ISAAC for security. $\endgroup$ – Squeamish Ossifrage Apr 24 at 16:55
  • 3
    $\begingroup$ but it defeats the whole purpose of having such large entropy when the security is less. - what exactly is the purpose of having > 256 bits of security? $\endgroup$ – Ella Rose Apr 24 at 17:24
  • $\begingroup$ I am curious from an academic viewpoint $\endgroup$ – Mini kute Apr 24 at 21:42
  • 2
    $\begingroup$ Although it's pretty tricky to get a million bits of security if you realise that the internal state array is only 8192 bits. Any key's entropy has to be shoehorned into that. $\endgroup$ – Paul Uszak Apr 24 at 22:34
  • $\begingroup$ @Minikute The academic consensus is that there is no meaning to security levels beyond 256. Alleged security levels above 256 bits are hallmarks of scams and bullshit. That said, there is no academic consensus to whether ISAAC is secure at any level. $\endgroup$ – Squeamish Ossifrage Apr 25 at 21:08

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.