Re: [Cryptography] AES-256- More NIST-y? paranoia

[Grégory Alvarez]

Le 7 oct. 2013 à 17:45, Arnold Reinhold a...@me.com a écrit :

 other cipher algorithms are unlikely to catch up in performance in the 
 foreseeable future

You should take a look a this algorithm : http://eprint.iacr.org/2013/551.pdf

- The block size is variable and unknown from an attacker.
- The size of the key has no limit and is unknown from an attacker.
- The key size does not affect the algorithm speed (using a 256 bit key is the 
same as using a 1024 bit key).
- The algorithm is much faster than the average cryptographic function. 
Experimental test showed 600 Mo/s - 4 cycles/byte on an Intel Core 2 Duo P8600 
2.40GHz and 1,2 Go/s - 2 cycles/byte on an Intel i5-3210M 2.50GHz. Both CPU had 
only 2 cores.


___
The cryptography mailing list
cryptography@metzdowd.com
http://www.metzdowd.com/mailman/listinfo/cryptography

[Cryptography] Laws and cryptography

[Grégory Alvarez]

Hello,

Over the past year I was in contact with different cryptographers (I was 
designing a new symmetric algorithm) and they all told me in order to publish 
it no governmental authorization was needed. They also told me that they 
publish paper all the time without having an authorization.

However there is the Wassenaar Arrangement between US, Europe and other 
countries that regulate the export and use of cryptography 
(http://www.wassenaar.org/introduction/index.html).

The Article 3 of the chapter 2 of the european law says : An authorisation 
shall be required for the export of the dual-use items listed in Annex I 
(http://eur-lex.europa.eu/LexUriServ/LexUriServ.do?uri=OJ:L:2009:134:0001:0269:en:PDF).

What they consider dual-use items is A ′′symmetric algorithm′′ employing a key 
length in excess of 56 bits 
(http://www.wassenaar.org/controllists/2012/WA-LIST%20%2812%29%201/08%20-%20WA-LIST%20%2812%29%201%20-%20Cat%205P2.doc).

The department of the ministry of defense that handle this regulation can't 
answer if publishing a cryptographic algorithm needs an authorization. However 
the Wassenaar Arrangement clearly says that material, software and technology 
need an authorization to be exported / published.

What is actually the status of the law about cryptography and publishing new 
algorithms ? Is the cryptographer that publish a paper without governmental 
authorization an outlaw ?___
The cryptography mailing list
cryptography@metzdowd.com
http://www.metzdowd.com/mailman/listinfo/cryptography