SherbyNet - /page/wikibook/entry.mu

Micron Document

<!DOCTYPE html>

<title>Initialization vector</title>

</head>

<span id="openzim-page-title" class="mw-page-title-main"><span class="mw-page-title-main">Initialization vector</span></span>

</h1>

</header>

<p>In <a href="Cryptography" title="Cryptography">cryptography</a>, an <b>initialization vector</b> (<b>IV</b>) or <b>starting variable</b><sup id="cite_ref-1" class="reference"><a href="#cite_note-1"><span class="cite-bracket">[</span>1<span class="cite-bracket">]</span></a></sup> is an input to a <a href="Cryptographic_primitive" title="Cryptographic primitive">cryptographic primitive</a> being used to provide the initial state. The IV is typically required to be <a href="Random" class="mw-redirect" title="Random">random</a> or <a href="Pseudorandom" class="mw-redirect" title="Pseudorandom">pseudorandom</a>, but sometimes an IV only needs to be unpredictable or unique. <a href="Randomization" title="Randomization">Randomization</a> is crucial for some <a href="Encryption" title="Encryption">encryption</a> schemes to achieve <a href="Semantic_security" title="Semantic security">semantic security</a>, a property whereby repeated usage of the scheme under the same <a href="Cryptographic_key" class="mw-redirect" title="Cryptographic key">key</a> does not allow an attacker to infer relationships between (potentially similar) segments of the encrypted message. For <a href="Block_cipher" title="Block cipher">block ciphers</a>, the use of an IV is described by the <a href="Block_cipher_mode_of_operation" title="Block cipher mode of operation">modes of operation</a>.

</p><p>Some cryptographic primitives require the IV only to be non-repeating, and the required randomness is derived internally. In this case, the IV is commonly called a <a href="Cryptographic_nonce" title="Cryptographic nonce">nonce</a> (a number used only once), and the primitives (e.g. <a href="Block_cipher_mode_of_operation#CBC" title="Block cipher mode of operation">CBC</a>) are considered <i>stateful</i> rather than <i>randomized</i>. This is because an IV need not be explicitly forwarded to a recipient but may be derived from a common state updated at both sender and receiver side. (In practice, a short nonce is still transmitted along with the message to consider message loss.) An example of stateful encryption schemes is the <a href="Counter_mode" class="mw-redirect" title="Counter mode">counter mode</a> of operation, which has a <a href="Sequence_number" title="Sequence number">sequence number</a> for a nonce.

</p><p>The IV size depends on the cryptographic primitive used; for block ciphers it is generally the cipher's block-size. In encryption schemes, the unpredictable part of the IV has at best the same size as the key to compensate for time/memory/data tradeoff attacks.<sup id="cite_ref-2" class="reference"><a href="#cite_note-2"><span class="cite-bracket">[</span>2<span class="cite-bracket">]</span></a></sup><sup id="cite_ref-3" class="reference"><a href="#cite_note-3"><span class="cite-bracket">[</span>3<span class="cite-bracket">]</span></a></sup><sup id="cite_ref-4" class="reference"><a href="#cite_note-4"><span class="cite-bracket">[</span>4<span class="cite-bracket">]</span></a></sup><sup id="cite_ref-ECRYPT_5-0" class="reference"><a href="#cite_note-ECRYPT-5"><span class="cite-bracket">[</span>5<span class="cite-bracket">]</span></a></sup> When the IV is chosen at random, the probability of collisions due to the <a href="Birthday_problem" title="Birthday problem">birthday problem</a> must be taken into account. Traditional stream ciphers such as <a href="RC4" title="RC4">RC4</a> do not support an explicit IV as input, and a custom solution for incorporating an IV into the cipher's key or internal state is needed. Some designs realized in practice are known to be insecure; the <a href="Wired_Equivalent_Privacy" title="Wired Equivalent Privacy">WEP</a> protocol is a notable example, and is prone to related-IV attacks.

</p>

<div class="mw-heading mw-heading2"><h2 id="Motivation">Motivation</h2></div>

<p>A <a href="Block_cipher" title="Block cipher">block cipher</a> is one of the most basic <a href="Cryptographic_primitive" title="Cryptographic primitive">primitives</a> in cryptography, and frequently used for data <a href="Encryption" title="Encryption">encryption</a>. However, by itself, it can only be used to encode a data block of a predefined size, called the <a href="Block_size_(cryptography)" title="Block size (cryptography)">block size</a>. For example, a single invocation of the <a href="Advanced_Encryption_Standard" title="Advanced Encryption Standard">AES</a> algorithm transforms a 128-bit <a href="Plaintext" title="Plaintext">plaintext</a> block into a <a href="Ciphertext" title="Ciphertext">ciphertext</a> block of 128 bits in size. The <a href="Cryptographic_key" class="mw-redirect" title="Cryptographic key">key</a>, which is given as one input to the cipher, defines the mapping between plaintext and ciphertext. If data of arbitrary length is to be encrypted, a simple strategy is to split the data into blocks each matching the cipher's block size, and encrypt each block separately using the same key. This method is not secure as equal plaintext blocks get transformed into equal ciphertexts, and a third party observing the encrypted data may easily determine its content even when not knowing the encryption key.

</p><p>To hide patterns in encrypted data while avoiding the re-issuing of a new key after each block cipher invocation, a method is needed to <a href="Randomization" title="Randomization">randomize</a> the input data. In 1980, the <a href="National_Institute_of_Standards_and_Technology" title="National Institute of Standards and Technology">NIST</a> published a national standard document designated <a href="Federal_Information_Processing_Standard" class="mw-redirect" title="Federal Information Processing Standard">Federal Information Processing Standard</a> (FIPS) PUB 81, which specified four so-called <a href="Block_cipher_mode_of_operation" title="Block cipher mode of operation">block cipher modes of operation</a>, each describing a different solution for encrypting a set of input blocks. The first mode implements the simple strategy described above, and was specified as the <a href="Electronic_codebook" class="mw-redirect" title="Electronic codebook">electronic codebook</a> (ECB) mode. In contrast, each of the other modes describe a process where ciphertext from one block encryption step gets intermixed with the data from the next encryption step. To initiate this process, an additional input value is required to be mixed with the first block, and which is referred to as an <i>initialization vector</i>. For example, the <a href="Cipher-block_chaining" class="mw-redirect" title="Cipher-block chaining">cipher-block chaining</a> (CBC) mode requires an unpredictable value, of size equal to the cipher's block size, as additional input. This unpredictable value is added to the first plaintext block before subsequent encryption. In turn, the ciphertext produced in the first encryption step is added to the second plaintext block, and so on. The ultimate goal for encryption schemes is to provide <a href="Semantic_security" title="Semantic security">semantic security</a>: by this property, it is practically impossible for an attacker to draw any knowledge from observed ciphertext. It can be shown that each of the three additional modes specified by the NIST are semantically secure under so-called <a href="Chosen-plaintext_attack" title="Chosen-plaintext attack">chosen-plaintext attacks</a>.

</p>

<div class="mw-heading mw-heading2"><h2 id="Properties">Properties</h2></div>

<p>Properties of an IV depend on the cryptographic scheme used. A basic requirement is <i>uniqueness</i>, which means that no IV may be reused under the same key. For block ciphers, repeated IV values devolve the encryption scheme into electronic codebook mode: equal IV and equal plaintext result in equal ciphertext. In <a href="Stream_cipher" title="Stream cipher">stream cipher</a> encryption uniqueness is crucially important as plaintext may be trivially recovered otherwise.

</p>

<dl><dd><i><b>Example:</b></i> Stream ciphers encrypt plaintext <i>P</i> to ciphertext <i>C</i> by deriving a key stream <i>K</i> from a given key and IV and computing <i>C</i> as <i>C</i> = <i>P</i> xor <i>K</i>. Assume that an attacker has observed two messages <i>C</i><sub>1</sub> and <i>C</i><sub>2</sub> both encrypted with the same key and IV. Then knowledge of either <i>P</i><sub>1</sub> or <i>P</i><sub>2</sub> reveals the other plaintext since

<p>Many schemes require the IV to be <i>unpredictable</i> by an <a href="Adversary_(cryptography)" title="Adversary (cryptography)">adversary</a>. This is effected by selecting the IV at <a href="Random" class="mw-redirect" title="Random">random</a> or <a href="Pseudo-random" class="mw-redirect" title="Pseudo-random">pseudo-randomly</a>. In such schemes, the chance of a duplicate IV is <a href="Negligible_function" title="Negligible function">negligible</a>, but the effect of the <a href="Birthday_problem" title="Birthday problem">birthday problem</a> must be considered. As for the uniqueness requirement, a predictable IV may allow recovery of (partial) plaintext.

</p>

<dl><dd><i><b>Example:</b></i> Consider a scenario where a legitimate party called Alice encrypts messages using the cipher-block chaining mode. Consider further that there is an adversary called Eve that can observe these encryptions and is able to forward plaintext messages to Alice for encryption (in other words, Eve is capable of a <a href="Chosen-plaintext_attack" title="Chosen-plaintext attack">chosen-plaintext attack</a>). Now assume that Alice has sent a message consisting of an initialization vector <i>IV</i><sub>1</sub> and starting with a ciphertext block <i>C<sub>Alice</sub></i>. Let further <i>P<sub>Alice</sub></i> denote the first plaintext block of Alice's message, let <i>E</i> denote encryption, and let <i>P<sub>Eve</sub></i> be Eve's guess for the first plaintext block. Now, if Eve can determine the initialization vector <i>IV</i><sub>2</sub> of the next message she will be able to test her guess by forwarding a plaintext message to Alice starting with (<i>IV</i><sub>2</sub> xor <i>IV</i><sub>1</sub> xor <i>P<sub>Eve</sub></i>); if her guess was correct this plaintext block will get encrypted to <i>C<sub>Alice</sub></i> by Alice. This is because of the following simple observation:

<dl><dd><i>C<sub>Alice</sub></i> = <i>E</i>(<i>IV</i><sub>1</sub> xor <i>P<sub>Alice</sub></i>) = <i>E</i>(<i>IV</i><sub>2</sub> xor (<i>IV</i><sub>2</sub> xor <i>IV</i><sub>1</sub> xor <i>P<sub>Alice</sub></i>)).<sup id="cite_ref-6" class="reference"><a href="#cite_note-6"><span class="cite-bracket">[</span>6<span class="cite-bracket">]</span></a></sup></dd></dl></dd></dl>

<p>Depending on whether the IV for a cryptographic scheme must be random or only unique the scheme is either called <i>randomized</i> or <i>stateful</i>. While randomized schemes always require the IV chosen by a sender to be forwarded to receivers, stateful schemes allow sender and receiver to share a common IV state, which is updated in a predefined way at both sides.

</p>

<div class="mw-heading mw-heading2"><h2 id="Block_ciphers">Block ciphers</h2></div>

<p>Block cipher processing of data is usually described as a mode of operation. Modes are primarily defined for encryption as well as <a href="Authentication" title="Authentication">authentication</a>, though newer designs exist that combine both security solutions in so-called <a href="Authenticated_encryption" title="Authenticated encryption">authenticated encryption</a> modes. While encryption and authenticated encryption modes usually take an IV matching the cipher's block size, authentication modes are commonly realized as <a href="Deterministic_algorithm" title="Deterministic algorithm">deterministic algorithms</a>, and the IV is set to zero or some other fixed value.

</p>

<div class="mw-heading mw-heading2"><h2 id="Stream_ciphers">Stream ciphers</h2></div>

<p>In stream ciphers, IVs are loaded into the keyed internal secret state of the cipher, after which a number of cipher rounds are executed prior to releasing the first bit of output. For performance reasons, designers of stream ciphers try to keep that number of rounds as small as possible, but because determining the minimal secure number of rounds for stream ciphers is not a trivial task, and considering other issues such as <a href="Information_entropy" class="mw-redirect" title="Information entropy">entropy</a> loss, unique to each cipher construction, related-IVs and other IV-related attacks are a known security issue for stream ciphers, which makes IV loading in stream ciphers a serious concern and a subject of ongoing research.

</p>

<p>The <a href="802.11" class="mw-redirect" title="802.11">802.11</a> <a href="Encryption" title="Encryption">encryption</a> <a href="Algorithm" title="Algorithm">algorithm</a> called WEP (short for <a href="Wired_Equivalent_Privacy" title="Wired Equivalent Privacy">Wired Equivalent Privacy</a>) used a short, 24-bit IV, leading to reused IVs with the same key, which led to it being easily cracked.<sup id="cite_ref-Intercepting_Mobile_Comm_Nik_Ian_Dav_7-0" class="reference"><a href="#cite_note-Intercepting_Mobile_Comm_Nik_Ian_Dav-7"><span class="cite-bracket">[</span>7<span class="cite-bracket">]</span></a></sup> <a href="Packet_injection" title="Packet injection">Packet injection</a> allowed for WEP to be cracked in times as short as several seconds. This ultimately led to the deprecation of WEP.

</p>

<p>In <a href="Block_cipher_mode_of_operation#Cipher_block_chaining_(CBC)" title="Block cipher mode of operation">cipher-block chaining mode</a> (CBC mode), the IV need not be secret, but must be unpredictable (In particular, for any given plaintext, it must not be possible to predict the IV that will be associated to the plaintext in advance of the generation of the IV.) at encryption time. Additionally for the <a href="Block_cipher_mode_of_operation#OFB" title="Block cipher mode of operation">output feedback mode</a> (OFB mode), the IV must be unique.<sup id="cite_ref-8" class="reference"><a href="#cite_note-8"><span class="cite-bracket">[</span>8<span class="cite-bracket">]</span></a></sup> In particular, the (previously) common practice of re-using the last ciphertext block of a message as the IV for the next message is insecure (for example, this method was used by SSL 2.0). If an attacker knows the IV (or the previous block of ciphertext) before he specifies the next plaintext, he can check his guess about plaintext of some block that was encrypted with the same key before. This is known as the TLS CBC IV attack, also called the <a href="Transport_Layer_Security#BEAST_attack" title="Transport Layer Security">BEAST attack</a>.<sup id="cite_ref-9" class="reference"><a href="#cite_note-9"><span class="cite-bracket">[</span>9<span class="cite-bracket">]</span></a></sup>

</p>

<ul><li><a href="Cryptographic_nonce" title="Cryptographic nonce">Cryptographic nonce</a></li>

<li><a href="Padding_(cryptography)" title="Padding (cryptography)">Padding (cryptography)</a></li>

<li><a href="Random_seed" title="Random seed">Random seed</a></li>

<li><a href="Salt_(cryptography)" title="Salt (cryptography)">Salt (cryptography)</a></li>

<li><a href="Block_cipher_mode_of_operation" title="Block cipher mode of operation">Block cipher modes of operation</a></li>

<li><a href="CipherSaber" title="CipherSaber">CipherSaber</a> (RC4 with IV)</li></ul>

<div class="mw-heading mw-heading2"><h2 id="References">References</h2></div>

/* start https://en.wikipedia.org/ */

.mw-parser-output .reflist{margin-bottom:0.5em;list-style-type:decimal}@media screen{.mw-parser-output .reflist{font-size:90%}}.mw-parser-output .reflist .references{font-size:100%;margin-bottom:0;list-style-type:inherit}.mw-parser-output .reflist-columns-2{column-width:30em}.mw-parser-output .reflist-columns-3{column-width:25em}.mw-parser-output .reflist-columns{margin-top:0.3em}.mw-parser-output .reflist-columns ol{margin-top:0}.mw-parser-output .reflist-columns li{page-break-inside:avoid;break-inside:avoid-column}.mw-parser-output .reflist-upper-alpha{list-style-type:upper-alpha}.mw-parser-output .reflist-upper-roman{list-style-type:upper-roman}.mw-parser-output .reflist-lower-alpha{list-style-type:lower-alpha}.mw-parser-output .reflist-lower-greek{list-style-type:lower-greek}.mw-parser-output .reflist-lower-roman{list-style-type:lower-roman}

/* end https://en.wikipedia.org/ */

</style><div class="reflist">

<li id="cite_note-1"><span class="mw-cite-backlink"><b><a href="#cite_ref-1">^</a></b></span> <span class="reference-text">ISO/IEC 10116:2006 <i>Information technology — Security techniques — Modes of operation for an </i>n<i>-bit block cipher</i></span>

</li>

/* start https://en.wikipedia.org/ */

.mw-parser-output cite.citation{font-style:inherit;word-wrap:break-word}.mw-parser-output .citation q{quotes:"\"""\"""'""'"}.mw-parser-output .citation:target{background-color:rgba(0,127,255,0.133)}.mw-parser-output .id-lock-free.id-lock-free a{background:url("./mw/Lock-green.svg")right 0.1em center/9px no-repeat}.mw-parser-output .id-lock-limited.id-lock-limited a,.mw-parser-output .id-lock-registration.id-lock-registration a{background:url("./mw/Lock-gray-alt-2.svg")right 0.1em center/9px no-repeat}.mw-parser-output .id-lock-subscription.id-lock-subscription a{background:url("./mw/Lock-red-alt-2.svg")right 0.1em center/9px no-repeat}.mw-parser-output .cs1-ws-icon a{background:url("./mw/Wikisource-logo.svg")right 0.1em center/12px no-repeat}body:not(.skin-timeless):not(.skin-minerva) .mw-parser-output .id-lock-free a,body:not(.skin-timeless):not(.skin-minerva) .mw-parser-output .id-lock-limited a,body:not(.skin-timeless):not(.skin-minerva) .mw-parser-output .id-lock-registration a,body:not(.skin-timeless):not(.skin-minerva) .mw-parser-output .id-lock-subscription a,body:not(.skin-timeless):not(.skin-minerva) .mw-parser-output .cs1-ws-icon a{background-size:contain;padding:0 1em 0 0}.mw-parser-output .cs1-code{color:inherit;background:inherit;border:none;padding:inherit}.mw-parser-output .cs1-hidden-error{display:none;color:var(--color-error,#d33)}.mw-parser-output .cs1-visible-error{color:var(--color-error,#d33)}.mw-parser-output .cs1-maint{display:none;color:#085;margin-left:0.3em}.mw-parser-output .cs1-kern-left{padding-left:0.2em}.mw-parser-output .cs1-kern-right{padding-right:0.2em}.mw-parser-output .citation .mw-selflink{font-weight:inherit}@media screen{.mw-parser-output .cs1-format{font-size:95%}html.skin-theme-clientpref-night .mw-parser-output .cs1-maint{color:#18911f}}@media screen and (prefers-color-scheme:dark){html.skin-theme-clientpref-os .mw-parser-output .cs1-maint{color:#18911f}}

/* end https://en.wikipedia.org/ */

</style><cite id="CITEREFAlex_Biryukov2005" class="citation journal cs1">Alex Biryukov (2005). <a rel="nofollow" class="external text" href="http://eprint.iacr.org/2005/207">"Some Thoughts on Time-Memory-Data Tradeoffs"</a>. <i>IACR ePrint Archive</i>.</cite></span>

</li>

<li id="cite_note-3"><span class="mw-cite-backlink"><b><a href="#cite_ref-3">^</a></b></span> <span class="reference-text"><cite id="CITEREFJin_HongPalash_Sarkar2005" class="citation journal cs1">Jin Hong; Palash Sarkar (2005). <a rel="nofollow" class="external text" href="http://eprint.iacr.org/2005/090">"Rediscovery of Time Memory Tradeoffs"</a>. <i>IACR ePrint Archive</i>.</cite></span>

</li>

<li id="cite_note-4"><span class="mw-cite-backlink"><b><a href="#cite_ref-4">^</a></b></span> <span class="reference-text"><cite id="CITEREFBiryukovMukhopadhyaySarkar2005" class="citation conference cs1">Biryukov, Alex; Mukhopadhyay, Sourav; Sarkar, Palash (2005). "Improved Time-Memory Trade-Offs with Multiple Data". In Preneel, Bart; Tavares, Stafford E. (eds.). <i>Selected Areas in Cryptography, 12th International Workshop, SAC 2005, Kingston, ON, Canada, August 11-12, 2005, Revised Selected Papers</i>. Lecture Notes in Computer Science. Vol. 3897. Springer. pp. <span class="nowrap">110–</span>127. <a href="Doi_(identifier)" class="mw-redirect" title="Doi (identifier)">doi</a>:<span class="id-lock-free" title="Freely accessible"><a rel="nofollow" class="external text" href="https://doi.org/10.1007%2F11693383_8">10.1007/11693383_8</a></span>. <a href="ISBN_(identifier)" class="mw-redirect" title="ISBN (identifier)">ISBN</a> <bdi>978-3-540-33108-7</bdi>.</cite></span>

</li>

<li id="cite_note-ECRYPT-5"><span class="mw-cite-backlink"><b><a href="#cite_ref-ECRYPT_5-0">^</a></b></span> <span class="reference-text"><cite id="CITEREFChristophe_De_CannièreJoseph_LanoBart_Preneel2005" class="citation techreport cs1">Christophe De Cannière; Joseph Lano; Bart Preneel (2005). <a rel="nofollow" class="external text" href="http://www.ecrypt.eu.org/stream/papersdir/040.pdf"><i>Comments on the Rediscovery of Time/Memory/Data Trade-off Algorithm</i></a> <span class="cs1-format">(PDF)</span> (Technical report). ECRYPT Stream Cipher Project. 40.</cite></span>

</li>

<li id="cite_note-6"><span class="mw-cite-backlink"><b><a href="#cite_ref-6">^</a></b></span> <span class="reference-text"><a rel="nofollow" class="external text" href="http://cwe.mitre.org/data/definitions/329.html">CWE-329: Not Using a Random IV with CBC Mode</a></span>

</li>

<li id="cite_note-Intercepting_Mobile_Comm_Nik_Ian_Dav-7"><span class="mw-cite-backlink"><b><a href="#cite_ref-Intercepting_Mobile_Comm_Nik_Ian_Dav_7-0">^</a></b></span> <span class="reference-text"><cite id="CITEREFBorisovGoldbergWagner" class="citation web cs1"><a href="Nikita_Borisov" title="Nikita Borisov">Borisov, Nikita</a>; <a href="Ian_Goldberg" title="Ian Goldberg">Goldberg, Ian</a>; <a href="David_A._Wagner" title="David A. Wagner">Wagner, David</a>. <a rel="nofollow" class="external text" href="http://www.isaac.cs.berkeley.edu/isaac/mobicom.pdf">"Intercepting Mobile Communications: The Insecurity of 802.11"</a> <span class="cs1-format">(PDF)</span><span class="reference-accessdate">. Retrieved <span class="nowrap">2006-09-12</span></span>.</cite></span>

</li>

<li id="cite_note-8"><span class="mw-cite-backlink"><b><a href="#cite_ref-8">^</a></b></span> <span class="reference-text"><cite id="CITEREFMorris_Dworkin2001" class="citation cs2">Morris Dworkin (2001), <a rel="nofollow" class="external text" href="https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-38a.pdf"><i>NIST Recommendation for Block Cipher Modes of Operation; Chapters 6.2 and 6.4</i></a> <span class="cs1-format">(PDF)</span></cite></span>

</li>

<li id="cite_note-9"><span class="mw-cite-backlink"><b><a href="#cite_ref-9">^</a></b></span> <span class="reference-text"><cite id="CITEREFB._Moeller2004" class="citation cs2">B. Moeller (May 20, 2004), <a rel="nofollow" class="external text" href="https://web.archive.org/web/20120630143111/http://www.openssl.org/~bodo/tls-cbc.txt"><i>Security of CBC Ciphersuites in SSL/TLS: Problems and Countermeasures</i></a>, archived from <a rel="nofollow" class="external text" href="https://www.openssl.org/~bodo/tls-cbc.txt">the original</a> on June 30, 2012<span class="reference-accessdate">, retrieved <span class="nowrap">September 1,</span> 2014</span></cite></span>

</li>

</ol></div></div>

<div class="mw-heading mw-heading2"><h2 id="Further_reading">Further reading</h2></div>

<ul><li><cite id="CITEREFSchneier1996" class="citation book cs1"><a href="Bruce_Schneier" title="Bruce Schneier">Schneier, B.</a> (1996). <a rel="nofollow" class="external text" href="https://archive.org/details/Applied_Cryptography_2nd_ed._B._Schneier"><i>Applied Cryptography</i></a> (2nd ed.). New York: Wiley. <a href="ISBN_(identifier)" class="mw-redirect" title="ISBN (identifier)">ISBN</a> <bdi>978-0-471-12845-8</bdi>.</cite></li>

<li><cite id="CITEREFFergusonSchneier2003" class="citation book cs1">Ferguson, N.; Schneier, B. (2003). <i>Practical Cryptography</i>. New York: Wiley. <a href="ISBN_(identifier)" class="mw-redirect" title="ISBN (identifier)">ISBN</a> <bdi>978-0-471-22894-3</bdi>.</cite></li></ul>

/* start https://en.wikipedia.org/ */

.mw-parser-output .hlist dl,.mw-parser-output .hlist ol,.mw-parser-output .hlist ul{margin:0;padding:0}.mw-parser-output .hlist dd,.mw-parser-output .hlist dt,.mw-parser-output .hlist li{margin:0;display:inline}.mw-parser-output .hlist.inline,.mw-parser-output .hlist.inline dl,.mw-parser-output .hlist.inline ol,.mw-parser-output .hlist.inline ul,.mw-parser-output .hlist dl dl,.mw-parser-output .hlist dl ol,.mw-parser-output .hlist dl ul,.mw-parser-output .hlist ol dl,.mw-parser-output .hlist ol ol,.mw-parser-output .hlist ol ul,.mw-parser-output .hlist ul dl,.mw-parser-output .hlist ul ol,.mw-parser-output .hlist ul ul{display:inline}.mw-parser-output .hlist .mw-empty-li{display:none}.mw-parser-output .hlist dt::after{content:": "}.mw-parser-output .hlist dd::after,.mw-parser-output .hlist li::after{content:" · ";font-weight:bold}.mw-parser-output .hlist dd:last-child::after,.mw-parser-output .hlist dt:last-child::after,.mw-parser-output .hlist li:last-child::after{content:none}.mw-parser-output .hlist dd dd:first-child::before,.mw-parser-output .hlist dd dt:first-child::before,.mw-parser-output .hlist dd li:first-child::before,.mw-parser-output .hlist dt dd:first-child::before,.mw-parser-output .hlist dt dt:first-child::before,.mw-parser-output .hlist dt li:first-child::before,.mw-parser-output .hlist li dd:first-child::before,.mw-parser-output .hlist li dt:first-child::before,.mw-parser-output .hlist li li:first-child::before{content:" (";font-weight:normal}.mw-parser-output .hlist dd dd:last-child::after,.mw-parser-output .hlist dd dt:last-child::after,.mw-parser-output .hlist dd li:last-child::after,.mw-parser-output .hlist dt dd:last-child::after,.mw-parser-output .hlist dt dt:last-child::after,.mw-parser-output .hlist dt li:last-child::after,.mw-parser-output .hlist li dd:last-child::after,.mw-parser-output .hlist li dt:last-child::after,.mw-parser-output .hlist li li:last-child::after{content:")";font-weight:normal}.mw-parser-output .hlist ol{counter-reset:listitem}.mw-parser-output .hlist ol>li{counter-increment:listitem}.mw-parser-output .hlist ol>li::before{content:" "counter(listitem)"\a0 "}.mw-parser-output .hlist dd ol>li:first-child::before,.mw-parser-output .hlist dt ol>li:first-child::before,.mw-parser-output .hlist li ol>li:first-child::before{content:" ("counter(listitem)"\a0 "}

/* end https://en.wikipedia.org/ */

</style><style data-mw-deduplicate="TemplateStyles:r1236075235">

/* start https://en.wikipedia.org/ */

.mw-parser-output .navbox{box-sizing:border-box;border:1px solid #a2a9b1;width:100%;clear:both;font-size:88%;text-align:center;padding:1px;margin:1em auto 0}.mw-parser-output .navbox .navbox{margin-top:0}.mw-parser-output .navbox+.navbox,.mw-parser-output .navbox+.navbox-styles+.navbox{margin-top:-1px}.mw-parser-output .navbox-inner,.mw-parser-output .navbox-subgroup{width:100%}.mw-parser-output .navbox-group,.mw-parser-output .navbox-title,.mw-parser-output .navbox-abovebelow{padding:0.25em 1em;line-height:1.5em;text-align:center}.mw-parser-output .navbox-group{white-space:nowrap;text-align:right}.mw-parser-output .navbox,.mw-parser-output .navbox-subgroup{background-color:#fdfdfd}.mw-parser-output .navbox-list{line-height:1.5em;border-color:#fdfdfd}.mw-parser-output .navbox-list-with-group{text-align:left;border-left-width:2px;border-left-style:solid}.mw-parser-output tr+tr>.navbox-abovebelow,.mw-parser-output tr+tr>.navbox-group,.mw-parser-output tr+tr>.navbox-image,.mw-parser-output tr+tr>.navbox-list{border-top:2px solid #fdfdfd}.mw-parser-output .navbox-title{background-color:#ccf}.mw-parser-output .navbox-abovebelow,.mw-parser-output .navbox-group,.mw-parser-output .navbox-subgroup .navbox-title{background-color:#ddf}.mw-parser-output .navbox-subgroup .navbox-group,.mw-parser-output .navbox-subgroup .navbox-abovebelow{background-color:#e6e6ff}.mw-parser-output .navbox-even{background-color:#f7f7f7}.mw-parser-output .navbox-odd{background-color:transparent}.mw-parser-output .navbox .hlist td dl,.mw-parser-output .navbox .hlist td ol,.mw-parser-output .navbox .hlist td ul,.mw-parser-output .navbox td.hlist dl,.mw-parser-output .navbox td.hlist ol,.mw-parser-output .navbox td.hlist ul{padding:0.125em 0}.mw-parser-output .navbox .navbar{display:block;font-size:100%}.mw-parser-output .navbox-title .navbar{float:left;text-align:left;margin-right:0.5em}body.skin--responsive .mw-parser-output .navbox-image img{max-width:none!important}@media print{body.ns-0 .mw-parser-output .navbox{display:none!important}}

/* end https://en.wikipedia.org/ */

</style><style data-mw-deduplicate="TemplateStyles:r1239400231">

/* start https://en.wikipedia.org/ */

.mw-parser-output .navbar{display:inline;font-size:88%;font-weight:normal}.mw-parser-output .navbar-collapse{float:left;text-align:left}.mw-parser-output .navbar-boxtext{word-spacing:0}.mw-parser-output .navbar ul{display:inline-block;white-space:nowrap;line-height:inherit}.mw-parser-output .navbar-brackets::before{margin-right:-0.125em;content:"[ "}.mw-parser-output .navbar-brackets::after{margin-left:-0.125em;content:" ]"}.mw-parser-output .navbar li{word-spacing:-0.125em}.mw-parser-output .navbar a>span,.mw-parser-output .navbar a>abbr{text-decoration:inherit}.mw-parser-output .navbar-mini abbr{font-variant:small-caps;border-bottom:none;text-decoration:none;cursor:inherit}.mw-parser-output .navbar-ct-full{font-size:114%;margin:0 7em}.mw-parser-output .navbar-ct-mini{font-size:114%;margin:0 4em}html.skin-theme-clientpref-night .mw-parser-output .navbar li a abbr{color:var(--color-base)!important}@media(prefers-color-scheme:dark){html.skin-theme-clientpref-os .mw-parser-output .navbar li a abbr{color:var(--color-base)!important}}@media print{.mw-parser-output .navbar{display:none!important}}

/* end https://en.wikipedia.org/ */

</style></div><div role="navigation" class="navbox" aria-label="Navbox0" style="padding:3px"><table class="nowraplinks hlist navbox-inner" style="border-spacing:0;background:transparent;color:inherit"><tbody><tr><td colspan="2" class="navbox-list navbox-odd" style="width:100%;padding:0"><div style="padding:0 0.25em"></div><table class="nowraplinks navbox-subgroup" style="border-spacing:0"><tbody><tr><td colspan="2" class="navbox-list navbox-odd" style="width:100%;padding:0"><div style="padding:0 0.25em"></div><table class="nowraplinks navbox-subgroup" style="border-spacing:0"><tbody><tr><th scope="col" class="navbox-title" colspan="2"><div id="Block_ciphers_(security_summary)197" style="font-size:114%;margin:0 4em"><a href="Block_cipher" title="Block cipher">Block ciphers</a> (<a href="Cipher_security_summary" title="Cipher security summary">security summary</a>)</div></th></tr><tr><th scope="row" class="navbox-group" style="width:1%">Common<br>algorithms</th><td class="navbox-list-with-group navbox-list navbox-odd hlist" style="width:100%;padding:0"><div style="padding:0 0.25em">

<li><a href="Blowfish_(cipher)" title="Blowfish (cipher)">Blowfish</a></li>

<li><a href="Data_Encryption_Standard" title="Data Encryption Standard">DES</a> (<a href="DES_supplementary_material" title="DES supplementary material">internal mechanics</a>, <a href="Triple_DES" title="Triple DES">Triple DES</a>)</li>

<li><a href="Serpent_(cipher)" title="Serpent (cipher)">Serpent</a></li>

<li><a href="Twofish" title="Twofish">Twofish</a></li></ul>

</div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%">Less common<br>algorithms</th><td class="navbox-list-with-group navbox-list navbox-even hlist" style="width:100%;padding:0"><div style="padding:0 0.25em">

<li><a href="Camellia_(cipher)" title="Camellia (cipher)">Camellia</a></li>

<li><a href="Skipjack_(cipher)" title="Skipjack (cipher)">Skipjack</a></li>

</div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%">Other<br>algorithms</th><td class="navbox-list-with-group navbox-list navbox-odd hlist" style="width:100%;padding:0"><div style="padding:0 0.25em">

<li><a href="Adiantum_(cipher)" title="Adiantum (cipher)">Adiantum</a></li>

<li><a href="Akelarre_(cipher)" title="Akelarre (cipher)">Akelarre</a></li>

<li><a href="Anubis_(cipher)" title="Anubis (cipher)">Anubis</a></li>

<li><a href="Ascon_(cipher)" title="Ascon (cipher)">Ascon</a></li>

<li><a href="BaseKing" title="BaseKing">BaseKing</a></li>

<li><a href="BassOmatic" title="BassOmatic">BassOmatic</a></li>

<li><a href="BATON" title="BATON">BATON</a></li>

<li><a href="Chiasmus_(cipher)" title="Chiasmus (cipher)">Chiasmus</a></li>

<li><a href="CIPHERUNICORN-A" title="CIPHERUNICORN-A">CIPHERUNICORN-A</a></li>

<li><a href="CIPHERUNICORN-E" title="CIPHERUNICORN-E">CIPHERUNICORN-E</a></li>

<li><a href="CLEFIA" title="CLEFIA">CLEFIA</a></li>

<li><a href="Cobra_ciphers" title="Cobra ciphers">Cobra</a></li>

<li><a href="COCONUT98" title="COCONUT98">COCONUT98</a></li>

<li><a href="Cryptomeria_cipher" title="Cryptomeria cipher">Cryptomeria/C2</a></li>

<li><a href="CRYPTON" title="CRYPTON">CRYPTON</a></li>

<li><a href="CS-Cipher" title="CS-Cipher">CS-Cipher</a></li>

<li><a href="Grand_Cru_(cipher)" title="Grand Cru (cipher)">Grand Cru</a></li>

<li><a href="Hasty_Pudding_cipher" title="Hasty Pudding cipher">Hasty Pudding cipher</a></li>

<li><a href="Hierocrypt" title="Hierocrypt">Hierocrypt</a></li>

<li><a href="Intel_Cascade_Cipher" title="Intel Cascade Cipher">Intel Cascade Cipher</a></li>

<li><a href="Iraqi_block_cipher" title="Iraqi block cipher">Iraqi</a></li>

<li><a href="Kalyna_(cipher)" title="Kalyna (cipher)">Kalyna</a></li>

<li><a href="KASUMI" title="KASUMI">KASUMI</a></li>

<li><a href="KeeLoq" title="KeeLoq">KeeLoq</a></li>

<li><a href="KHAZAD" title="KHAZAD">KHAZAD</a></li>

<li><a href="Khufu_and_Khafre" title="Khufu and Khafre">Khufu and Khafre</a></li>

<li><a href="KN-Cipher" title="KN-Cipher">KN-Cipher</a></li>

<li><a href="Kuznyechik" title="Kuznyechik">Kuznyechik</a></li>

<li><a href="Ladder-DES" title="Ladder-DES">Ladder-DES</a></li>

<li><a href="Lucifer_(cipher)" title="Lucifer (cipher)">Lucifer</a></li>

<li><a href="MacGuffin_(cipher)" title="MacGuffin (cipher)">MacGuffin</a></li>

<li><a href="Madryga" title="Madryga">Madryga</a></li>

<li><a href="MAGENTA" title="MAGENTA">MAGENTA</a></li>

<li><a href="Mercy_(cipher)" title="Mercy (cipher)">Mercy</a></li>

<li><a href="MISTY1" title="MISTY1">MISTY1</a></li>

<li><a href="MULTI2" title="MULTI2">MULTI2</a></li>

<li><a href="MultiSwap" title="MultiSwap">MultiSwap</a></li>

<li><a href="NewDES" title="NewDES">NewDES</a></li>

<li><a href="Nimbus_(cipher)" title="Nimbus (cipher)">Nimbus</a></li>

<li><a href="NOEKEON" title="NOEKEON">NOEKEON</a></li>

<li><a href="PRESENT" title="PRESENT">PRESENT</a></li>

<li><a href="Prince_(cipher)" title="Prince (cipher)">Prince</a></li>

<li><a href="QARMA" title="QARMA">QARMA</a></li>

<li><a href="REDOC" title="REDOC">REDOC</a></li>

<li><a href="Secure_and_Fast_Encryption_Routine" title="Secure and Fast Encryption Routine">SAFER</a></li>

<li><a href="SAVILLE" title="SAVILLE">SAVILLE</a></li>

<li><a href="SHACAL" title="SHACAL">SHACAL</a></li>

<li><a href="SHARK" title="SHARK">SHARK</a></li>

<li><a href="Simon_(cipher)" title="Simon (cipher)">Simon</a></li>

<li><a href="Speck_(cipher)" title="Speck (cipher)">Speck</a></li>

<li><a href="Spectr-H64" title="Spectr-H64">Spectr-H64</a></li>

<li><a href="Square_(cipher)" title="Square (cipher)">Square</a></li>

<li><a href="Threefish" title="Threefish">Threefish</a></li>

<li><a href="Treyfer" title="Treyfer">Treyfer</a></li>

<li><a href="XXTEA" title="XXTEA">XXTEA</a></li>

<li><a href="Zodiac_(cipher)" title="Zodiac (cipher)">Zodiac</a></li></ul>

</div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%">Design</th><td class="navbox-list-with-group navbox-list navbox-even hlist" style="width:100%;padding:0"><div style="padding:0 0.25em">

<ul><li><a href="Feistel_cipher" title="Feistel cipher">Feistel network</a></li>

<li><a href="Key_schedule" title="Key schedule">Key schedule</a></li>

<li><a href="Lai%E2%80%93Massey_scheme" title="Lai–Massey scheme">Lai–Massey scheme</a></li>

<li><a href="Product_cipher" title="Product cipher">Product cipher</a></li>

<li><a href="Confusion_and_diffusion" title="Confusion and diffusion">Confusion and diffusion</a></li>

<li><a href="Round_(cryptography)" title="Round (cryptography)">Round</a></li>

<li><a href="Avalanche_effect" title="Avalanche effect">Avalanche effect</a></li>

<li><a href="Block_size_(cryptography)" title="Block size (cryptography)">Block size</a></li>

<li><a href="Key_whitening" title="Key whitening">Key whitening</a> (<a href="Whitening_transformation" title="Whitening transformation">Whitening transformation</a>)</li></ul>

</div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%">Attack<br>(<a href="Cryptanalysis" title="Cryptanalysis">cryptanalysis</a>)</th><td class="navbox-list-with-group navbox-list navbox-odd hlist" style="width:100%;padding:0"><div style="padding:0 0.25em">

<ul><li><a href="Brute-force_attack" title="Brute-force attack">Brute-force</a> (<a href="EFF_DES_cracker" title="EFF DES cracker">EFF DES cracker</a>)</li>

<ul><li><a href="Biclique_attack" title="Biclique attack">Biclique attack</a></li>

<li><a href="3-subset_meet-in-the-middle_attack" title="3-subset meet-in-the-middle attack">3-subset MITM attack</a></li></ul></li>

<li><a href="Linear_cryptanalysis" title="Linear cryptanalysis">Linear</a> (<a href="Piling-up_lemma" title="Piling-up lemma">Piling-up lemma</a>)</li>

<li><a href="Differential_cryptanalysis" title="Differential cryptanalysis">Differential</a>

<ul><li><a href="Impossible_differential_cryptanalysis" title="Impossible differential cryptanalysis">Impossible</a></li>

<li><a href="Truncated_differential_cryptanalysis" title="Truncated differential cryptanalysis">Truncated</a></li>

<li><a href="Higher-order_differential_cryptanalysis" title="Higher-order differential cryptanalysis">Higher-order</a></li></ul></li>

<li><a href="Differential-linear_attack" title="Differential-linear attack">Differential-linear</a></li>

<li><a href="Distinguishing_attack" title="Distinguishing attack">Distinguishing</a> (<a href="Known-key_distinguishing_attack" title="Known-key distinguishing attack">Known-key</a>)</li>

<li><a href="Integral_cryptanalysis" title="Integral cryptanalysis">Integral/Square</a></li>

<li><a href="Boomerang_attack" title="Boomerang attack">Boomerang</a></li>

<li><a href="Related-key_attack" title="Related-key attack">Related-key</a></li>

<li><a href="Slide_attack" title="Slide attack">Slide</a></li>

<li><a href="Rotational_cryptanalysis" title="Rotational cryptanalysis">Rotational</a></li>

<li><a href="Side-channel_attack" title="Side-channel attack">Side-channel</a>

<ul><li><a href="Timing_attack" title="Timing attack">Timing</a></li>

<li><a href="Power_analysis" title="Power analysis">Power-monitoring</a></li>

<li><a href="Electromagnetic_attack" title="Electromagnetic attack">Electromagnetic</a></li>

<li><a href="Acoustic_cryptanalysis" title="Acoustic cryptanalysis">Acoustic</a></li>

<li><a href="Differential_fault_analysis" title="Differential fault analysis">Differential-fault</a></li></ul></li>

<li><a href="Interpolation_attack" title="Interpolation attack">Interpolation</a></li>

<li><a href="Partitioning_cryptanalysis" title="Partitioning cryptanalysis">Partitioning</a></li>

<li><a href="Rubber-hose_cryptanalysis" class="mw-redirect" title="Rubber-hose cryptanalysis">Rubber-hose</a></li>

<li><a href="Black-bag_cryptanalysis" title="Black-bag cryptanalysis">Black-bag</a></li>

<li><a href="Davies_attack" title="Davies attack">Davies</a></li>

<li><a href="Rebound_attack" title="Rebound attack">Rebound</a></li>

<li><a href="Chi-squared_test" title="Chi-squared test">Chi-square</a></li>

<li><a href="Time/memory/data_tradeoff_attack" title="Time/memory/data tradeoff attack">Time/memory/data tradeoff</a></li></ul>

</div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%">Standardization</th><td class="navbox-list-with-group navbox-list navbox-even hlist" style="width:100%;padding:0"><div style="padding:0 0.25em">

<ul><li><a href="Advanced_Encryption_Standard_process" title="Advanced Encryption Standard process">AES process</a></li>

<li><a href="CRYPTREC" title="CRYPTREC">CRYPTREC</a></li>

<li><a href="NESSIE" title="NESSIE">NESSIE</a></li>

<li><a href="NSA_Suite_B_Cryptography" title="NSA Suite B Cryptography">NSA Suite B</a></li>

</div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%">Utilization</th><td class="navbox-list-with-group navbox-list navbox-odd hlist" style="width:100%;padding:0"><div style="padding:0 0.25em">

<ul>

<li><a href="Block_cipher_mode_of_operation" title="Block cipher mode of operation">Mode of operation</a></li>

<li><a href="Padding_(cryptography)" title="Padding (cryptography)">Padding</a></li></ul>

</div></td></tr></tbody></table><div></div></td></tr><tr><td colspan="2" class="navbox-list navbox-odd" style="width:100%;padding:0"><div style="padding:0 0.25em"></div><table class="nowraplinks navbox-subgroup" style="border-spacing:0"><tbody><tr><th scope="col" class="navbox-title" colspan="2"><div id="Stream_ciphers94" style="font-size:114%;margin:0 4em"><a href="Stream_cipher" title="Stream cipher">Stream ciphers</a></div></th></tr><tr><th scope="row" class="navbox-group" style="width:1%">Widely used ciphers</th><td class="navbox-list-with-group navbox-list navbox-odd hlist" style="width:100%;padding:0"><div style="padding:0 0.25em">

<li><a href="Salsa20#ChaCha_variant" title="Salsa20">ChaCha</a></li>

<li><a href="Crypto-1" title="Crypto-1">Crypto-1</a></li>

</div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%"><a href="ESTREAM" title="ESTREAM">eSTREAM</a> Portfolio</th><td class="navbox-list-with-group navbox-list navbox-odd hlist" style="width:100%;padding:0"><div style="padding:0 0.25em"></div><table class="nowraplinks navbox-subgroup" style="border-spacing:0"><tbody><tr><th scope="row" class="navbox-group" style="width:1%">Software</th><td class="navbox-list-with-group navbox-list navbox-even" style="width:100%;padding:0"><div style="padding:0 0.25em">

<li><a href="Rabbit_(cipher)" title="Rabbit (cipher)">Rabbit</a></li>

<li><a href="Salsa20" title="Salsa20">Salsa20</a></li>

<li><a href="SOSEMANUK" title="SOSEMANUK">SOSEMANUK</a></li></ul>

</div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%">Hardware</th><td class="navbox-list-with-group navbox-list navbox-odd" style="width:100%;padding:0"><div style="padding:0 0.25em">

<ul><li><a href="Grain_(cipher)" title="Grain (cipher)">Grain</a></li>

<li><a href="MICKEY" title="MICKEY">MICKEY</a></li>

<li><a href="Trivium_(cipher)" title="Trivium (cipher)">Trivium</a></li></ul>

</div></td></tr></tbody></table><div></div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%">Other ciphers</th><td class="navbox-list-with-group navbox-list navbox-even hlist" style="width:100%;padding:0"><div style="padding:0 0.25em">

<ul><li><a href="Achterbahn_(stream_cipher)" title="Achterbahn (stream cipher)">Achterbahn</a></li>

<li><a href="ISAAC_(cipher)" title="ISAAC (cipher)">ISAAC</a></li>

<li><a href="KCipher-2" title="KCipher-2">KCipher-2</a></li>

<li><a href="Panama_(cryptography)" title="Panama (cryptography)">Panama</a></li>

<li><a href="Phelix" title="Phelix">Phelix</a></li>

<li><a href="Scream_(cipher)" title="Scream (cipher)">Scream</a></li>

<li><a href="SOBER" title="SOBER">SOBER</a></li>

<li><a href="SOBER-128" title="SOBER-128">SOBER-128</a></li>

<li><a href="Spritz_(cipher)" class="mw-redirect" title="Spritz (cipher)">Spritz</a></li>

<li><a href="Turing_(cipher)" title="Turing (cipher)">Turing</a></li>

</div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%">Generators</th><td class="navbox-list-with-group navbox-list navbox-odd hlist" style="width:100%;padding:0"><div style="padding:0 0.25em">

<ul><li><a href="Shrinking_generator" title="Shrinking generator">shrinking generator</a></li>

<li><a href="Self-shrinking_generator" title="Self-shrinking generator">self-shrinking generator</a></li>

<li><a href="Alternating_step_generator" title="Alternating step generator">alternating step generator</a></li></ul>

</div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%">Theory</th><td class="navbox-list-with-group navbox-list navbox-even hlist" style="width:100%;padding:0"><div style="padding:0 0.25em">

<ul><li><a href="Block_cipher_mode_of_operation" title="Block cipher mode of operation">block ciphers in stream mode</a></li>

<li><a href="Shift_register" title="Shift register">shift register</a></li>

<li><a href="Nonlinear-feedback_shift_register" title="Nonlinear-feedback shift register">NLFSR</a></li>

<li><a href="T-function" title="T-function">T-function</a></li>

</ul>

</div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%">Attacks</th><td class="navbox-list-with-group navbox-list navbox-odd hlist" style="width:100%;padding:0"><div style="padding:0 0.25em">

<ul><li><a href="Correlation_attack" title="Correlation attack">correlation attack</a></li>

<li><a href="Correlation_immunity" title="Correlation immunity">correlation immunity</a></li>

<li><a href="Stream_cipher_attacks" title="Stream cipher attacks">stream cipher attacks</a></li></ul>

</div></td></tr></tbody></table><div></div></td></tr></tbody></table><div></div></td></tr><tr><td colspan="2" class="navbox-list navbox-odd" style="width:100%;padding:0"><div style="padding:0 0.25em"></div><table class="nowraplinks mw-collapsible mw-collapsed navbox-subgroup" style="border-spacing:0"><tbody><tr><th scope="col" class="navbox-title" colspan="2"><div id="Cryptography149" style="font-size:114%;margin:0 4em"><a href="Cryptography" title="Cryptography">Cryptography</a></div></th></tr><tr><th scope="row" class="navbox-group" style="width:1%">General</th><td class="navbox-list-with-group navbox-list navbox-odd" style="width:100%;padding:0"><div style="padding:0 0.25em">

<ul><li><a href="History_of_cryptography" title="History of cryptography">History of cryptography</a></li>

<li><a href="Outline_of_cryptography" title="Outline of cryptography">Outline of cryptography</a></li>

<li><a href="Classical_cipher" title="Classical cipher">Classical cipher</a></li>

<li><a href="Cryptographic_protocol" title="Cryptographic protocol">Cryptographic protocol</a>

<ul><li><a href="Authentication_protocol" title="Authentication protocol">Authentication protocol</a></li></ul></li>

<li><a href="Cryptographic_primitive" title="Cryptographic primitive">Cryptographic primitive</a></li>

<li><a href="Cryptanalysis" title="Cryptanalysis">Cryptanalysis</a></li>

<li><a href="Cryptocurrency" title="Cryptocurrency">Cryptocurrency</a></li>

<li><a href="Cryptosystem" title="Cryptosystem">Cryptosystem</a></li>

<li><a href="Cryptographic_nonce" title="Cryptographic nonce">Cryptographic nonce</a></li>

<li><a href="Cryptovirology" title="Cryptovirology">Cryptovirology</a></li>

<li><a href="Hash_function" title="Hash function">Hash function</a>

<ul><li><a href="Cryptographic_hash_function" title="Cryptographic hash function">Cryptographic hash function</a></li>

<li><a href="Key_derivation_function" title="Key derivation function">Key derivation function</a></li>

<li><a href="Secure_Hash_Algorithms" title="Secure Hash Algorithms">Secure Hash Algorithms</a></li></ul></li>

<li><a href="Digital_signature" title="Digital signature">Digital signature</a></li>

<li><a href="Kleptography" title="Kleptography">Kleptography</a></li>

<li><a href="Key_(cryptography)" title="Key (cryptography)">Key (cryptography)</a></li>

<li><a href="Key_exchange" title="Key exchange">Key exchange</a></li>

<li><a href="Key_generator" title="Key generator">Key generator</a></li>

<li><a href="Key_schedule" title="Key schedule">Key schedule</a></li>

<li><a href="Key_stretching" title="Key stretching">Key stretching</a></li>

<li><a href="Keygen" title="Keygen">Keygen</a></li>

<li>Machines</li>

<li><a href="Cryptojacking_malware" class="mw-redirect" title="Cryptojacking malware">Cryptojacking malware</a></li>

<li><a href="Ransomware" title="Ransomware">Ransomware</a></li>

<li><a href="Random_number_generation" title="Random number generation">Random number generation</a>

<ul><li><a href="Cryptographically_secure_pseudorandom_number_generator" title="Cryptographically secure pseudorandom number generator">Cryptographically secure pseudorandom number generator</a> (CSPRNG)</li></ul></li>

<li><a href="Pseudorandom_noise" title="Pseudorandom noise">Pseudorandom noise</a> (PRN)</li>

<li><a href="Secure_channel" title="Secure channel">Secure channel</a></li>

<li><a href="Insecure_channel" class="mw-redirect" title="Insecure channel">Insecure channel</a></li>

<li><a href="Subliminal_channel" title="Subliminal channel">Subliminal channel</a></li>

<li><a href="Encryption" title="Encryption">Encryption</a></li>

<li><a href="Decryption" class="mw-redirect" title="Decryption">Decryption</a></li>

<li><a href="End-to-end_encryption" title="End-to-end encryption">End-to-end encryption</a></li>

<li><a href="Harvest_now%2C_decrypt_later" title="Harvest now, decrypt later">Harvest now, decrypt later</a></li>

<li><a href="Information-theoretic_security" title="Information-theoretic security">Information-theoretic security</a></li>

<li><a href="Plaintext" title="Plaintext">Plaintext</a></li>

<li><a href="Codetext" class="mw-redirect" title="Codetext">Codetext</a></li>

<li><a href="Ciphertext" title="Ciphertext">Ciphertext</a></li>

<li><a href="Shared_secret" title="Shared secret">Shared secret</a></li>

<li><a href="Trapdoor_function" title="Trapdoor function">Trapdoor function</a></li>

<li><a href="Trusted_timestamping" title="Trusted timestamping">Trusted timestamping</a></li>

<li><a href="Key-based_routing" title="Key-based routing">Key-based routing</a></li>

<li><a href="Onion_routing" title="Onion routing">Onion routing</a></li>

<li><a href="Garlic_routing" title="Garlic routing">Garlic routing</a></li>

<li><a href="Kademlia" title="Kademlia">Kademlia</a></li>

<li><a href="Mix_network" title="Mix network">Mix network</a></li></ul>

</div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%">Mathematics</th><td class="navbox-list-with-group navbox-list navbox-even" style="width:100%;padding:0"><div style="padding:0 0.25em">

<ul><li><a href="Cryptographic_hash_function" title="Cryptographic hash function">Cryptographic hash function</a></li>

<li><a href="Block_cipher" title="Block cipher">Block cipher</a></li>

<li><a href="Stream_cipher" title="Stream cipher">Stream cipher</a></li>

<li><a href="Symmetric-key_algorithm" title="Symmetric-key algorithm">Symmetric-key algorithm</a></li>

<li><a href="Authenticated_encryption" title="Authenticated encryption">Authenticated encryption</a></li>

<li><a href="Public-key_cryptography" title="Public-key cryptography">Public-key cryptography</a></li>

<li><a href="Quantum_key_distribution" title="Quantum key distribution">Quantum key distribution</a></li>

<li><a href="Quantum_cryptography" title="Quantum cryptography">Quantum cryptography</a></li>

<li><a href="Post-quantum_cryptography" title="Post-quantum cryptography">Post-quantum cryptography</a></li>

<li><a href="Message_authentication_code" title="Message authentication code">Message authentication code</a></li>

<li><a href="Cryptographically_secure_pseudorandom_number_generator" title="Cryptographically secure pseudorandom number generator">Random numbers</a></li>

<li><a href="Steganography" title="Steganography">Steganography</a></li></ul>

</div></td></tr><tr><td class="navbox-abovebelow" colspan="2"><div>

<ul><li><span class="noviewer" typeof="mw:File"><span title="Category"></span></span> Category</li></ul>

</div></td></tr></tbody></table><div></div></td></tr></tbody></table></div></div><div><div class="zim-footer">

This article is issued from <a class="external text" title="Last edited on 2024-09-07" href="https://en.wikipedia.org/wiki/?title=Initialization_vector&oldid=1244468461">Wikipedia</a>. The text is available under <a class="external text" href="https://creativecommons.org/licenses/by-sa/4.0/deed.en">Creative Commons Attribution-Share Alike 4.0</a> unless otherwise noted. Additional terms may apply for the media files.

</div>

</div></div>

</div>

</main>

</div>

</body></html>