7 votes

HW acceleration for Camellia cipher (x86_64/AES-NI/AVX2)

The obvious answer to your question is "yes". The kernel mode implementation pointed to by otus clearly shows that it can be done. That it can be done doesn't mean it gets done however. Many Google ...
Maarten Bodewes's user avatar
  • 92.4k
6 votes
Accepted

Cryptographic algorithms comparison, AES vs Camellia

Both AES and Camellia are block ciphers with a block size of 128 bits and three different key sizes: 128, 192 and 256 bits. In both cases, when using a bigger key size, like 192 or 256, the cipher ...
Lery's user avatar
  • 7,649
6 votes

Linear Approximation and Linear Probability of Camellia Sbox

Let $LP$ be the linear probability (also called "correlation potential"), $Cor$ be the correlation coefficient and $\epsilon$ be the bias of a linear approximation. Then $LP = Cor^2 = (2\times \...
FreeDisciplina's user avatar
5 votes
Accepted

Side Channel Attacks

Avoid: Using secret data in table based lookups on machines that have a cache The table is just a memoized function; Just compute the function explicitly each iteration instead of looking the answer ...
Ella Rose's user avatar
  • 19.6k
4 votes
Accepted

Why Camellia paper declares that it is faster than Rijndael while it is actually much slower?

The paper says it is comparable in speed hardware and software to the AES finalists. If we look at low end hardware performance, say cycles and resource bytes on a Z80 smart card: ...
Richie Frame's user avatar
  • 13.1k
3 votes

Symmetric cipher speed (AES vs Camellia vs Twofish)

Just use AES. It's hardware-accelerated and implementations have had ages to have flaws discovered and patched. More strongly, just use GPG to encrypt data at rest and just use TLS (>= 1.2, with ...
Stephen Touset's user avatar
3 votes
Accepted

Why Camellia has 4 Sbox

The only way you will have a certain answer will be by mailing their designers. Using multiple S-boxes increases the size of the code and decreases the possibility of working with different blocs in ...
Biv's user avatar
  • 9,979
2 votes

Countering Cryptographic Attacks

Differential and Linear Crypt-analysis. Number of Active S-boxes along-with the Differential and Linear probabilities of S-box contributes towards resistance against these attacks which also ...
hardyrama's user avatar
  • 2,074
2 votes

Camellia Key Schedule

This question and answer covers the requirements of a key schedule. I could not find a simpler description of Camellia then this rfc The following excerpt outlines the key schedule. Addressing only ...
Ella Rose's user avatar
  • 19.6k
2 votes
Accepted

Does Camellia-GCM use Camellia-CTR to create GCM Hash?

Does Camellia-GCM use Camellia-CTR to create GCM Hash? GCM is a mode of operation for a 128-bit blocksize block cipher that turns it into an authenticated encryption scheme. It doesn't care about ...
SEJPM's user avatar
  • 45.9k
1 vote
Accepted

Camellia 1.2.0: words with 0 at key table

While NTT looks into this, I'm posting this as a "solution": By inspection of the function void camellia_setup256(const unsigned char *key, u32 *subkey) ...
devnull's user avatar
  • 121
1 vote

Correlation power analysis attack on Camellia

Camellia is 128-bit Feistel block cipher and 128/192/256 key. The sbox is 8-bit register, hence there are 8 cells in F function . The correlation power analysis depended on hamming weight. Steps to ...
hardyrama's user avatar
  • 2,074
1 vote

Block Ciphers with encryption speed similar to AES

Although one would like to think that AES-NI can speed up Camellia because the s-box structure is shared, there are differences because of the fact that Camellia is a Feistel-Network structure. AES-...
b degnan's user avatar
  • 4,722

Only top scored, non community-wiki answers of a minimum length are eligible