Questions tagged [camellia]
Camellia is a 128-bit, symmetrical block cipher jointly developed by Mitsubishi and NTT of Japan.
21
questions
1
vote
1
answer
117
views
Camellia 1.2.0: words with 0 at key table
Testing a code that uses the Camellia 1.2.0 source code, when generating a keyTable from the input key, using:
...
- 121
0
votes
1
answer
132
views
Does Camellia-GCM use Camellia-CTR to create GCM Hash?
I'm still confused when reading GnuTLS/Nettle implementation about Camellia-GCM.
- 103
2
votes
1
answer
99
views
Correlation power analysis attack on Camellia
I'm investigating a correlation power analysis on a black-box ASIC I have.
I want to learn about correlation analysis and it seems this ASIC implements Camellia.
I searched for researches that did ...
- 41
2
votes
1
answer
429
views
Why Camellia paper declares that it is faster than Rijndael while it is actually much slower?
I'm writing an assignment on Camellia cipher. In the NTT paper, they declare a speed at least comparable with Rijndael, but, searching around, I found that it is actually much slower. I thought this ...
- 181
-1
votes
1
answer
190
views
Block Ciphers with encryption speed similar to AES
What all block ciphers can achieve encryption speed similar/near to AES on general purpose computers with AES-NI enabled and disabled.
Camellia seems to be near to AES, and Twofish seems to be much ...
- 2,397
3
votes
1
answer
9k
views
Cryptographic algorithms comparison, AES vs Camellia
Which parameters should be used to compare AES vs Camellia? Their runtime ? The size of the encrypted data output?
- 51
4
votes
0
answers
204
views
Differential Path Search of a Block Cipher
Camellia Design and Analysis document refers to a paper:
[24] M. Matsui, "Differential Path Search of the Block
Cipher E2," (in Japanese), Technical report of IE-
ICE, ISEC99-19, pp.57-64, The ...
- 2,397
3
votes
1
answer
793
views
Linear Approximation and Linear Probability of Camellia Sbox
In this article,Analysis of Camellia (para 2. Differential and linear cryptanalysis, page 3), it says
The maximum bias of a linear approximation through one S-box is $2^{-4}$
, which gives a ...
- 2,397
1
vote
0
answers
142
views
Camellia Sbox - Linear Approximation Probability [duplicate]
One Page 7, of Document Camellia Design and Analysis
The author says,
In the case of Camellia, the maximum diferential/linear probabilities of s-boxes are $2^{-6}$.
Since Camellia S-boxes are ...
- 2,397
3
votes
1
answer
2k
views
Side Channel Attacks
How to make cipher resist against Side channel Attacks. Specially Timing Attack, Cachet Timing Attach, Simple/ Differential Power Analysis.
Uptil now it seems all Standard Algorithms like AES, ...
- 2,397
3
votes
1
answer
437
views
Why Camellia has 4 Sbox
I asked a question about using 16 different Sboxes in AES each for one state byte instead of using same One Sbox for substituting 16 state bytes (See the Question Increase in AES SBox). The answers i ...
- 2,397
3
votes
1
answer
229
views
Countering Cryptographic Attacks
By reading Camellia Design and Analysis document following is my understanding about few cryptographic attacks from designer point of view.
Differential and Linear Crypt-analysis. Number of Active S-...
- 2,397
2
votes
2
answers
444
views
Camellia Key Schedule
Camellia is widely used, an international standard now. Its key schedule seems to be too simple compared to other famous ciphers like Twofish and CAST-256. What are the prerequisites for the key ...
- 2,397
1
vote
1
answer
3k
views
Symmetric cipher speed (AES vs Camellia vs Twofish)
If I have understood correctly, Twofish is more secure (harder to break) than AES and Camellia, but it's slower than both.
How can I measure the speed difference between AES vs Twofish and Camellia ...
- 355
5
votes
1
answer
2k
views
HW acceleration for Camellia cipher (x86_64/AES-NI/AVX2)
Modern processors support hardware acceleration for various crypto functions such as AES directly, or general vector operations which can be used in crypto ...
- 159
1
vote
0
answers
1k
views
How to calculate the avalanche effect in aes-256?
I am a beginner in cryptography. I'm testing AES-128 bit key, AES-256 bit key, and Camellia-256 bit key.
I'm using AES-256, 9 character salt, CBC mode, PKCS #5 padding, and the ciphertext using ...
- 19
12
votes
4
answers
3k
views
Do any non-US ciphers exist?
Plenty of ciphers come out of the USA from government research or selection competitions. AES and DES are examples.
Are there any public ciphers produced by other states, China or Iran for example? ...
user9070
5
votes
2
answers
2k
views
Camellia or AES - which should I use? [closed]
Imagine I am a software developer. I want a block cipher, and I have the choice of using AES or Camellia. Which should I use? Which makes more sense from a technical perspective, and why? I need ...
- 36.2k
3
votes
1
answer
326
views
Camellia cipher - is it a symmetric or asymmetric cipher?
I read a wiki page about Camellia cipher and know that it is a block cipher that can use 128-bit, 192-bit or 256-bit keys. But I cant find any information about if its a symmetric cipher (uses one key ...
- 141
14
votes
1
answer
6k
views
Why is CAMELLIA suddenly so widely used?
When nowadays I point my browser to https sites, the cipher that is on most occasions used is Camellia. My browsers (Chrome and Firefox) seem to prefer it, even when AES is available.
Is that not ...
- 251
42
votes
3
answers
20k
views
Why does nobody use (or break) the Camellia Cipher?
If Camellia is of equivalent security and speed to AES, concerns arise.
First of all, assuming the above, why is Camellia so rarely used in practice?
Why aren't there any breaks in Camellia? Does ...
- 1,192