This page uses content from Wikipedia and is licensed under CC BY-SA.
|Derived from||SAFER, SHARK|
|Key sizes||128, 192, or 256 bits|
|Block sizes||128 bits|
|Best public cryptanalysis|
|Impossible differential cryptanalysis recovers 128-bit key in 2119 encryptions|
Zodiac uses a 16-round Feistel network structure with key whitening. The round function uses only XORs and S-box lookups. There are two 8×8-bit S-boxes: one based on the discrete exponentiation 45x as in SAFER, the other using the multiplicative inverse in the finite field GF(28), as introduced by SHARK.
Zodiac is theoretically vulnerable to impossible differential cryptanalysis, which can recover a 128-bit key in 2119 encryptions.
|This cryptography-related article is a stub. You can help Wikipedia by expanding it.|