Stream cipher
Comparison

Stream cipher

Section Title: Comparison
Table Section Text: None

Stream cipher	Creation date	Speed (cycles per byte)	(bits)	Attack

Effective key-length	Initialization vector	Internal state	Best known	Computational complexity

A5/1	1989	?	54 or 64 (in 2G)	22 (in 2G)	64	Active KPA OR KPA time–memory tradeoff	~2 seconds OR 239.91

A5/2	1989	?	54	114	64?	Active	4.6 milliseconds

Achterbahn-128/80	2006	1 (hardware)	80/128	80/128	297/351	Brute force for frame lengths L ≤ 244. Correlation attack for L ≥ 248.	280 resp. 2128 for L ≤ 244.

CryptMT	2005	?	Variable	up to 19968	19968	N/A (2008)	N/A (2008)

FISH	1993	?	Variable	?	?	Known-plaintext attack	211

Grain	Pre-2004	?	80	64	160	Key derivation	243

HC-256	Pre-2004	4 (WP4)	256	256	65536	?	?

ISAAC	1996	2.375 (W64-bit) – 4.6875 (W32-bit)	8–8288 (usually 40–256)	N/A	8288	(2006) First-round weak-internal-state-derivation	4.67×101240 (2001)

MUGI	1998–2002	?	128	128	1216	N/A (2002)	~282

PANAMA	1998	2	256	128?	1216?	Hash collisions (2001)	282

Phelix	Pre-2004	up to 8 (Wx86)	256 + a 128-bit nonce	128?	?	Differential (2006)	237

Pike	1994	?	Variable	?	?	N/A (2004)	N/A (2004)

Py	Pre-2004	2.6	8–2048? (usually 40–256?)	64	8320	Cryptanalytic theory (2006)	275

Rabbit	2003-Feb	3.7(WP3) – 9.7(WARM7)	128	64	512	N/A (2006)	N/A (2006)

RC4	1987	7 WP5	8–2048 (usually 40–256)	RC4 does not take an IV. If one desires an IV, it must be mixed into the key somehow.	2064	Shamir initial-bytes key-derivation OR KPA	213 OR 233

Salsa20	Pre-2004	4.24 (WG4) – 11.84 (WP4)	256	a 64-bit nonce + a 64-bit stream position	512	Probabilistic neutral bits method	2251 for 8 rounds (2007)

Scream	2002	4–5 (Wsoft)	128 + a 128-bit nonce	32?	64-bit round function	?	?

SEAL	1997	?	?	32?	?	?	?

SNOW	Pre-2003	?	128 or 256	32	?	?	?

SOBER-128	2003	?	up to 128	?	?	Message forge	2−6

SOSEMANUK	Pre-2004	?	128	128	?	?	?

Trivium	Pre-2004	4 (Wx86) – 8 (WLG)	80	80	288	Brute force attack (2006)	2135

Turing	2000–2003	5.5 (Wx86)	?	160	?	?	?

VEST	2005	42 (WASIC) – 64 (WFPGA)	Variable (usually 80–256)	Variable (usually 80–256)	256–800	N/A (2006)	N/A (2006)

WAKE	1993	?	?	?	8192	CPA & CCA	Vulnerable

Stream cipher	Creation date	Speed (cycles per byte)	(bits)	Attack

Effective key-length	Initialization vector	Internal state	Best known	Computational complexity

Sentence(s)

RC4, A5/1, A5/2, FISH, ISAAC, MUGI, Panama, Phelix, Pike, SEAL, SOBER-128, and WAKE are stream ciphers.

final_sentence: RC4, A5/1, A5/2, FISH, ISAAC, MUGI, Panama, Phelix, Pike, SEAL, SOBER-128, and WAKE are stream ciphers.