CRYPTREC2001
Report on Present State ofSymmetric-Key Cipher
Evaluations
January 28, 2002
Toshinobu Kaneko
Chair, Symmetric-Key Cryptography
Subcommittee
Professor, Science University of Tokyo
1

Ciphers to be evaluated• Submitted cipher categories– Ciphers submitted in FY2000
Part I– Other ciphers requiring evaluation– Ciphers newly submitted in FY2001 Æ Part II• Cryptographic technique categories– Symmetric-key ciphers (64- and 128-bit block ciphers)– Symmetric-key ciphers (stream ciphers)– Hash functions– Pseudo-random number generators

2Symmetric-Key Cryptography
Subcommittee
Kiyomichi Araki(Tokyo Institute of Technology)

Toshinobu Kaneko(Science University of Tokyo)

Shinichi Kawamura(Toshiba Corporation)

Masayuki Kanda(Nippon Telegraph and Telephone Corporation)

Tohru Kohda(Kyushu University)

Kazukuni Kobara(University of Tokyo)

Kouichi Sakurai(Kyushu University)

Takeshi Shimoyama(Fujitsu Laboratories, Ltd.)

Kazuo Takaragi(Hitachi, Ltd.)

Makoto Tatebayashi(Matsushita Electric Industrial Co., Ltd.)

Yukiyasu Tsunoo(NEC Corporation)

Toshio Tokita(Mitsubishi Electric Corporation)

Masakatu Morii(University of Tokushima)3

I. Evaluations in current fiscal year
• Ciphers submitted in FY2000 (S2000)– Judgments based on CRYPTREC2000 report– Verification of cipher submitter’s intention to continuesubmission
Æ Monitored ciphers:• Full evaluations completed with CRYPTREC Report 2000
• E-government cipher candidates• We will not directly conduct an evaluation in the current fiscal year,
but we will continue to collect evaluation information from academic
societies and the like.

Æ Full evaluation ciphers:• E-government cipher candidates• Further evaluations are needed following on the full evaluations of thelast fiscal year
• External reviewers will be contracted to conduct full evaluations, witha focus on specialists in Japan and abroad4

I. Evaluations in current fiscal year (2)• Other ciphers requiring evaluation– De facto standards and other ciphers the Committee
considers it necessary to evaluate (Other2000), (Other2001)• Full evaluation by the end of FY2002• Full evaluation conducted by experts in Japan and abroad– Evaluation of comment requests from external organizations
Æ Specific evaluations: (Sp)• Evaluations focusing on requested ciphers5

I. Symmetric-key ciphers (64-bit)• Monitored ciphers– Hierocrypt-L1– MISTY1– T-DES• Full evaluation– CIPHERUNICORN-E– RC2(S2000)(S2000)(Other2000, Sp)(S2000) Æ Tokita (Member)(Sp)

6

I. Symmetric-key ciphers (128-bit)• Monitored ciphers– Camellia– Hierocrypt-3– RC6– SC2000• Full evaluation– AES (Rijndael)– CIPHERUNICORN-A– SEED(S2000) (Sp)
(S2000) (Sp)
(S2000)(S2000) (Sp)
(Other2000, Other2001)(S2000) Æ Kanda (Member)(Other2001, Sp)
7

I. Stream ciphers, hash functions, andpseudo-random number generators• Stream ciphers Full evaluation– MULTI-S01(S2000) Æ Shimoyama (Member)– RC4(Sp)• Hash functions Monitored– RIPEMD-160 (Other2000)– SHA-1(Other2000)• Hash functions Full evaluation– Draft SHA-{256|384|512}(Other2001)• Pseudo-random number generators
Monitored– PRNG based on SHA-1(Other2000)
8

II. Ciphers newly submitted inFY2001•

Evaluation procedure for submitted ciphers– Submission deadline– Document examination

Sep. 27, 2001

• Review of submitted documents. Possibly contracted to an
external reviewer.

– Briefing on submitted ciphers
Oct. 9, 2001-Oct. 10, 2001
Yamaha Hall
– Screening evaluation (by external reviewers)
Oct. 2001-Dec. 2001
• External reviewers are contracted to conduct the evaluations
based on last year’s format• Four people per cipher– CRYPTREC workshop
Jan. 28, 2002

– Consider whether a full evaluation is needed next year.

9II. Newly submitted cryptographictechniques•Stream ciphers– C4-1 (Focus Systems)••–FSAngo (Fujisoft ABC)•–No description of algorithm information that enables thirdparty implementation.
The reference program does not contain the actual submittedcipher.
No source code for reference program and test vector
generating program.

MUGI (Hitachi)•

Screening evaluation conducted (by external reviewer) ÆSakurai (Member)10• Pseudo-random number generators– Creation of intrinsic random numbers with Clutter Box(HMI)• Special hardware is required.
• Does not include sufficient information regarding the random
number generator algorithm– FSRansu (Fujisoft ABC)
• No source code for reference program and test vector
generating program.

– High security ultra mini random number generator(System Industrial Laboratory)• Special hardware is required.
• The reference program is a program for observing random
number series, so the random number generator algorithm
could not be evaluated.

– TAO TIME Cognition Algorithm (JCN)• Screening evaluation conducted (by external reviewer) ÆTakaragi (Member)11

III. Challenges for this fiscal year andnext fiscal year
• Wrapup of current fiscal year’s specific evaluations– RC4, RC2, SEED, AES, T-DES• External reviewers have been contracted to do theevaluations.
• Hardware performance evaluation• Full evaluation of newly submitted ciphers (S2001)• Continual monitoring system• Preparation of list of e-government recommended
ciphers12