The original serpent paper claims that the s-boxes provided are of non-linear order 3, the maximum. However, this has turned out to be false, as some of them are of order 2.

Are there any s-boxes available for serpent that comply with the properties indicated in the paper, and ideally, optimized for x86_64 architecture ?

If not, how could one find strong s-boxes that both respect those properties and are resistant to known attacks against serpent ?

  • $\begingroup$ Do you mean nonlinear order by algebraic order? $\endgroup$ – hardyrama May 12 '19 at 19:34
  • $\begingroup$ Serpent's S-boxes are only 4-bit, and there is quite a bit of research on ideal 4-bit S-boxes. $\endgroup$ – forest May 13 '19 at 2:35
  • $\begingroup$ This paper (eprint.iacr.org/2011/218.pdf ) contains a table of 4 bit sboxes used for different ciphers. for better implementation , i suggest to run the source code in this paper (tosc.iacr.org/index.php/ToSC/article/view/7406/6578) to find optimal implementation. $\endgroup$ – hardyrama May 13 '19 at 7:35

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.