Re: Secure Science issues preview of their upcoming block cipher

From: David Covin (dcovin_at_nmr.mgh.harvard.edu)
Date: 03/25/05

  • Next message: Adrian Floarea: "RE: Security Flaw with Digital signatures in Microsoft Outlook"
    Date: Fri, 25 Mar 2005 11:43:00 -0500 (EST)
    To: Adam Shostack <adam@homeport.org>
    
    

    Wouldn't a proof that AES-128 were reducible to CS2-128, so that any
    successful attack on CS2-128 would also constitute a successful attack on
    AES-128, provide exactly the situation that he describes? CS2-128 would be
    "provably as secure as" AES-128.

    On Thu, 24 Mar 2005, Adam Shostack wrote:

    > Really? How does one go about proving the security of a block cipher?
    >
    > My understanding is that you, and others, perform attacks against it,
    > and see how it holds up. Many of the very best minds out there
    > attacked AES, so for your new CS2 cipher to be "provably just as
    > secure as AES-128," all those people would have had to have spent as
    > much time and energy as they did on AES. That strikes me as unlikely,
    > there's a lot more interest in hash functions today.
    >
    > Adam
    >
    > PS: I've added the cryptography mail list to this. Some of the folks
    > over there may be interested in your claims.
    >
    > On Wed, Mar 23, 2005 at 05:00:25PM -0800, BugTraq wrote:
    > | Secure Science is offering a preview of one of the 3 ciphers they will
    > | be publishing througout the year. The CS2-128 cipher is a 128-bit block
    > | cipher with a 128 bit key. This cipher is proposed as an alternative
    > | hardware-based cipher to AES, being that it is more efficient in
    > | hardware, simpler to implement, and provably just as secure as AES-128.
    > |
    > | http://www.securescience.net/ciphers/csc2/
    > |
    > | --
    > | Best Regards,
    > | Secure Science Corporation
    > | [Have Phishers stolen your customers' logins? Find out with DIA]
    > | https://slam.securescience.com/signup.cgi - it's free!
    > |
    >


  • Next message: Adrian Floarea: "RE: Security Flaw with Digital signatures in Microsoft Outlook"