This page uses content from Wikipedia and is licensed under CC BY-SA.
|Key sizes||128 bits|
|Block sizes||64 bits|
|Best public cryptanalysis|
|Differential cryptanalysis can break Nimbus with 256 chosen plaintexts.|
The algorithm uses a 128-bit key. It operates on blocks of 64 bits and consists of 5 rounds of encryption. The round function is exceedingly simple. In each round the block is XORed with a subkey, the order of its bits is reversed, and then it is multiplied mod 264 by another subkey, which is forced to be odd.
Nimbus was broken by Vladimir Furman; he found a differential attack using only 256 chosen plaintexts.
|This cryptography-related article is a stub. You can help Wikipedia by expanding it.|