I have heard about ciphers that have a block length of 256 megabytes. That is huge. How well are they understood by the encryption community? I'm referring to PMC Ciphers.

Has anyone used such a cipher in a real world application?

  • 3
    $\begingroup$ It's easy to construct a large block blockcipher from a normal block cipher with a factor 2 performance hit. So I see little reason to use dedicated large block blockciphers. $\endgroup$ Commented May 30, 2013 at 11:01
  • 7
    $\begingroup$ This website sure looks dodgy. They push large blocks as an advantage without ever giving a reason. They declare that being able to use low-end devices is a downside (it's a downside for password hashing, which isn't what ciphers are for). They demonstrate the insecurity of ECB mode and claim that the underlying cipher is the problem. Their papers aren't peer-reviewed and somehow they claim it as an advantage. All in all, that's a load of snake oil. $\endgroup$ Commented May 30, 2013 at 12:25
  • $\begingroup$ in that image comparison (encrypting a 6 bit grayscale with large patches of same color) is very skewed against AES by using ECB, the PDF only mentions CBC as an afterthought $\endgroup$ Commented May 30, 2013 at 12:56
  • $\begingroup$ Apparently encryption primitives derived from PRP's must use padding as they have a fixed block size (??). Stopped reading there. Snake oil and the author is clueless. $\endgroup$
    – Thomas
    Commented Jun 8, 2013 at 10:11
  • 1
    $\begingroup$ The link does not go directly to any relevant information. $\endgroup$
    – Patriot
    Commented Aug 2, 2021 at 5:34


Browse other questions tagged or ask your own question.