23
votes
Accepted
What encryption should I use: Blowfish, Twofish, or Threefish?
TL;DR: Twofish and Threefish are fine.
It is not the best idea to have the cipher you want to use hardcoded because you can't upgrade easily when one of them is broken. to quote mikeazo in the ...
- 10k
13
votes
Accepted
Why is Threefish not widely used?
I've asked Bruce Schneier if they would provide a good mode for encryption. However, I don't think they were directly interested at that point as they were in the final phases of the SHA-3 competition....
- 94.5k
13
votes
Accepted
Which is stronger: Threefish 1024-bit, SHACAL-2 512-bit, or AES-256?
Neither SHACAL-2 nor Threefish are "more" secure than AES because it's a case of "meh cannot break" with all of them.
All three ciphers are unbroken and all three use keys larger than 128-bit* ...
- 46.4k
10
votes
What encryption should I use: Blowfish, Twofish, or Threefish?
If you want to choose a fishy cipher by Bruce et al, I'd go for Twofish.
Reason:
Blowfish is not recommended anymore because of the small block size of 64 bits, among others. Even Bruce is not ...
- 94.5k
9
votes
Accepted
Is there a real purpose to use Twofish, Serpent or Threefish instead of AES?
Serpent is straightforward to implement with side-channel resistance due to the bit-sliced design. Because AES incorporates an S-Box that is most simply implemented as a lookup table, implementations ...
- 19.9k
5
votes
Which is stronger: Threefish 1024-bit, SHACAL-2 512-bit, or AES-256?
There is more to a question like this than just has the algorithm been broken. The other and equally important question is how was the encryption algorithm implemented? Who implemented it and was it ...
- 51
3
votes
Accepted
How to determine which tweak was used
This is outside the goal of tweakable block ciphers. For a counterexample, the following is an example of a secure (if inefficient) tweakable block cipher in the paper introducing tweakable block ...
- 49.5k
3
votes
How to encrypt data with the Threefish cipher
As far as I know there isn't any Threefish-specific encryption standard specified. I actually asked Bruce Schneier back in the day (when I created my "SkeinFromSpec" implementation). Threefish is a ...
- 94.5k
3
votes
Some simple questions about tweakable ciphers
Suppose the tweakable cipher uses a secret key $k$ and a secret tweak $t$, then syntactically you can regard $K=(k, t)$ as the total secret key. So, in this case, the 'tweakable cipher' is just an ...
- 858
3
votes
Is there a real purpose to use Twofish, Serpent or Threefish instead of AES?
In most cases, you should probably use AES, especially if there is hardware support.
In some cases, it might make sense to use one of the others. For example, the simplicity of Threefish would make ...
3
votes
OpenSSL supports AES, Camellia, ChaCha. How about Twofish, Threefish, Serpent?
AES is the main block cipher in use today, standardized by NIST. Camellia is a Japanese standardized cipher. ChaCha is a fast stream cipher specified by Bernstein and incorporated into TLS with ...
- 94.5k
2
votes
Faster cipher than AES256-CBC to use for DRM purpose
If you are writing your own implementation of AES, and can use the AES-NI instruction set, then you will end up with a cipher that is mathematically secure and fast. Very fast... AES in hardware is ...
- 13.2k
1
vote
Can the Threefish tweak block cipher have its fixed 128 bit tweak size extended to match the block size (256/512/1024)
You can extend tweak of Threefish, but that is significant modification and requires analysis. That would no longer be Threefish. It will probably decrease performance.
All subkeys (every key/tweak ...
- 1,702
1
vote
Accepted
Can MCOE AEAD mode be modified to work with Threefish tweak block cipher and generate intermediate tags
You can truncate tag (xoring MSB with LSB would not improve anything) to 128-bit to fit in tweak. It will reduce security of tag and limit number of blocks you can encrypt with same key to $2^{64}$ (...
- 1,702
1
vote
Accepted
Some simple questions about tweakable ciphers
Are the tweaks always just a string of bits?
There is no reason that it has to be. Some algorithm designer could put a restriction on tweaks beyond just how many bits it can have.
Are they ...
- 3,333
1
vote
Accepted
What is the difference between lightweight tweakable block cipher and tweakable block cipher?
In the case of SKINNY the first column in the comparison tables lists the area as GE value. GE is the "gate equivalent", I'll quote Wikopedia on this one:
A gate equivalent (GE) stands for a unit ...
- 94.5k
1
vote
What encryption should I use: Blowfish, Twofish, or Threefish?
I agree that you shouldn't use Blowfish.
Whether Twofish or Threefish, depends on the application. Of course, if there is hardware support for AES, then you should use AES.
A good application for ...
Only top scored, non community-wiki answers of a minimum length are eligible