diff options
Diffstat (limited to 'doc/rfc/rfc4269.txt')
| -rw-r--r-- | doc/rfc/rfc4269.txt | 899 |
1 files changed, 899 insertions, 0 deletions
diff --git a/doc/rfc/rfc4269.txt b/doc/rfc/rfc4269.txt new file mode 100644 index 0000000..8a910aa --- /dev/null +++ b/doc/rfc/rfc4269.txt @@ -0,0 +1,899 @@ + + + + + + +Network Working Group H.J. Lee +Request for Comments: 4269 S.J. Lee +Obsoletes: 4009 J.H. Yoon +Category: Informational D.H. Cheon + J.I. Lee + KISA + December 2005 + + + The SEED Encryption Algorithm + +Status of This Memo + + This memo provides information for the Internet community. It does + not specify an Internet standard of any kind. Distribution of this + memo is unlimited. + +Copyright Notice + + Copyright (C) The Internet Society (2005). + +Abstract + + This document describes the SEED encryption algorithm, which has been + adopted by most of the security systems in the Republic of Korea. + Included are a description of the encryption and the key scheduling + algorithm (Section 2), the S-boxes (Appendix A), and a set of test + vectors (Appendix B). + + This document obsoletes RFC 4009. + + + + + + + + + + + + + + + + + + + + + +Lee, et al. Informational [Page 1] + +RFC 4269 The SEED Encryption Algorithm December 2005 + + +1. Introduction + +1.1. Changes from RFC 4009 + + This specification obsoletes RFC 4009, because RFC 4009 had ambiguous + function and SS-boxes definitions cryptographically. Thus, some + definitions have been changed, and for better understanding, the SEED + pseudo codes have been modified. This update is to provide clarity + and facilitate the development of interoperable implementations. The + SEED algorithm itself has not been changed. + + This specification updates RFC 4009 in the following areas: + + - Pseudo code changes. The pseudo code in Section 2 of RFC 4009 + is insufficient for the explanation of the structure of SEED. + Thus, detailed pseudo code is introduced. + + - Some corrections of errata, which are the definitions of R1', Z, + X, and SS-boxes. + +1.2. SEED Overview + + SEED is a 128-bit symmetric key block cipher that has been developed + by KISA (Korea Information Security Agency) since 1998. SEED is a + national standard encryption algorithm in the Republic of Korea + [TTASSEED] and is designed to use the S-boxes and permutations that + balance with the current computing technology. It has the Feistel + structure with 16-round and is strong against DC (Differential + Cryptanalysis), LC (Linear Cryptanalysis), and related key attacks, + balanced with security/efficiency trade-off. + + The features of SEED are outlined as follows: + + - The Feistel structure with 16-round + - 128-bit input/output data block size + - 128-bit key length + - A round function that is strong against known attacks + - Two 8x8 S-boxes + - Mixed operations of XOR and modular addition + + SEED has been widely used in the Republic of Korea for confidential + services such as electronic commerce; e.g., financial services + provided in wired and wireless communication. + + + + + + + + +Lee, et al. Informational [Page 2] + +RFC 4269 The SEED Encryption Algorithm December 2005 + + +1.3. Notation + + The following notation is used in the description of the SEED + encryption algorithm: + + & bitwise AND + ^ bitwise exclusive OR + + addition in modular 2**32 + - subtraction in modular 2**32 + || concatenation + << n left circular rotation by n bits + >> n right circular rotation by n bits + 0x hexadecimal representation + +2. The Structure of SEED + + The input/output block size of SEED is 128 bits, and the key length + is also 128 bits. SEED has the 16-round Feistel structure. A + 128-bit input is divided into two 64-bit blocks (L, R), and the right + 64-bit block is an input to the round function F, with a 64-bit + subkey Ki generated from the key schedule. L is the most significant + 64 bits of 128-bit input, and R is the least significant 64 bits. + + A pseudo code for the structure of SEED is as follows: + + Input : (L, R) + + for i = 1 to 15 + + T = R; + R = L ^ F(Ki, R); + L = T; + + L = L ^ F(K16, R), R=R + + Output : (L, R) + + Where T is a temporary. + +2.1. The Round Function F + + SEED uses two 8x8 S-boxes, permutations, rotations, and basic modular + operations such as exclusive OR (XOR) and additions to provide strong + security, high speed, and simplicity in its implementation. + + A 64-bit input block of the round function F is divided into two + 32-bit blocks (R0, R1) and wrapped with 4 phases: + + + + +Lee, et al. Informational [Page 3] + +RFC 4269 The SEED Encryption Algorithm December 2005 + + + - A mixing phase of two 32-bit subkey blocks (Ki0, Ki1) + - 3 layers of function G (see Section 2.2), with additions for + mixing two 32-bit blocks + + Where R0 is the most significant 32 bits of R, and R1 is the least + significant 32 bits. + + The outputs (R0', R1') of function F are as follows: + + R0' = G[ G[ G[(R0 ^ Ki0) ^ (R1 ^ Ki1)] + (R0 ^ Ki0)] + G[(R0 ^ Ki0) ^ + (R1 ^ Ki1)]] + G[ G[(R0 ^ Ki0) ^ (R1 ^ Ki1)] + (R0 ^ Ki0)] + + R1' = G[ G[ G[(R0 ^ Ki0) ^ (R1 ^ Ki1)] + (R0 ^ Ki0)] + G[(R0 ^ Ki0) ^ + (R1 ^ Ki1)]] + +2.2. The Function G + + The function G has two layers: a layer of two 8x8 S-boxes and a layer + of block permutation of sixteen 8-bit sub-blocks. The outputs Z (= + Z3 || Z2 || Z1 || Z0) of the function G with four 8-bit inputs X (= + X3 || X2 || X1 || X0) are as follows: + + Z0 = {S0(X0) & m0} ^ {S1(X1) & m1} ^ {S0(X2) & m2} ^ {S1(X3) & m3} + Z1 = {S0(X0) & m1} ^ {S1(X1) & m2} ^ {S0(X2) & m3} ^ {S1(X3) & m0} + Z2 = {S0(X0) & m2} ^ {S1(X1) & m3} ^ {S0(X2) & m0} ^ {S1(X3) & m1} + Z3 = {S0(X0) & m3} ^ {S1(X1) & m0} ^ {S0(X2) & m1} ^ {S1(X3) & m2} + + where m0 = 0xFC, m1 = 0xF3, m2 = 0xCF, and m3 = 0x3F. + + To increase the efficiency of G function, four extended S-boxes + "SS-box" (see Appendix A.2) are defined as follows: + + SS0(X0)= {S0(X0)& m3} || {S0(X0)& m2} || {S0(X0)& m1} || {S0(X0)& m0} + SS1(X1)= {S1(X1)& m0} || {S1(X1)& m3} || {S1(X1)& m2} || {S1(X1)& m1} + SS2(X2)= {S0(X2)& m1} || {S0(X2)& m0} || {S0(X2)& m3} || {S0(X2)& m2} + SS3(X3)= {S1(X3)& m2} || {S1(X3)& m1} || {S1(X3)& m0} || {S1(X3)& m3} + + New G function, Z, can be defined as follows: + + Z = SS0(X0) ^ SS1(X1) ^ SS2(X2) ^ SS3(X3) + + This new G function is faster than the original G function but takes + more memory to store four SS-boxes. + + + + + + + + +Lee, et al. Informational [Page 4] + +RFC 4269 The SEED Encryption Algorithm December 2005 + + +2.3. Key Schedule + + The key schedule generates each round's subkeys. It uses the + function G, addition in modular 2**32, subtraction in modular 2**32, + and (left/right) circular rotation. A 128-bit input key is divided + into four 32-bit blocks (Key0, Key1, Key2, Key3). The two 32-bit + subkeys of the ith round, Ki0 and Ki1, are generated as follows: + + - Type 1 : Odd round + Ki0 = G(Key0 + Key2 - KCi) + Ki1 = G(Key1 - Key3 + KCi) + Key0 || Key1 = (Key0 || Key1) >> 8 + + - Type 2 : Even round + Ki0 = G(Key0 + Key2 - KCi) + Ki1 = G(Key1 - Key3 + KCi) + Key2 || Key3 = (Key2 || Key3) << 8 + + Where Ki0 is the most significant 32 bits of Ki, and Ki1 is the least + significant 32 bits of Ki (where i=0,...,3). + + The following table shows constants used in KCi: + + i | Value i | Value + ============================================ + KC1 | 0x9E3779B9 KC2 | 0x3C6EF373 + KC3 | 0x78DDE6E6 KC4 | 0xF1BBCDCC + KC5 | 0xE3779B99 KC6 | 0xC6EF3733 + KC7 | 0x8DDE6E67 KC8 | 0x1BBCDCCF + KC9 | 0x3779B99E KC10 | 0x6EF3733C + KC11 | 0xDDE6E678 KC12 | 0xBBCDCCF1 + KC13 | 0x779B99E3 KC14 | 0xEF3733C6 + KC15 | 0xDE6E678D KC16 | 0xBCDCCF1B + + A pseudo code for the key schedule is as follows: + + Input : (Key0, Key1, Key2, Key3) + + for i = 1 to 16 + Ki0 = G(Key0 + Key2 - KCi) + Ki1 = G(Key1 - Key3 + KCi) + if i is odd + Key0 || Key1 = (Key0 || Key1) >> 8 + else + Key2 || Key3 = (Key2 || Key3) << 8 + + Output : (Keyi0, Keyi1), i=1 to 16 + + + + +Lee, et al. Informational [Page 5] + +RFC 4269 The SEED Encryption Algorithm December 2005 + + +2.4. Decryption Procedure + + Decryption procedure is the reverse step of the encryption procedure. + It can be implemented by using the encryption algorithm with reverse + order of the round subkeys. + +2.5. SEED Object Identifiers + + For those who may be using SEED in algorithm negotiation within a + protocol, or in any other context that may require the use of Object + Identifiers (OIDs), the following three OIDs have been defined. + + algorithm OBJECT IDENTIFIER ::= { iso(1) member-body(2) korea(410) + kisa(200004) algorithm(1) } + + id-seedCBC OBJECT IDENTIFIER ::= { algorithm seedCBC(4) } + + seedCBCParameter ::= OCTET STRING (SIZE(16)) + -- 128-bit Initialization Vector + + The id-seedCBC OID is used when the Cipher Block Chaining (CBC) mode + of operation based on the SEED block cipher is provided. + + id-seedMAC OBJECT IDENTIFIER ::= { algorithm seedMAC(7) } + + seedMACParameter ::= INTEGER -- MAC length, in bits + + The id-seedMAC OID is used when the message authentication code (MAC) + algorithm based on the SEED block cipher is provided. + + pbeWithSHA1AndSEED-CBC OBJECT IDENTIFIER ::= + { algorithm seedCBCwithSHA1(15) } + + PBEParameters ::= SEQUENCE { salt OCTET STRING, iteration + INTEGER } -- Total number of hash iterations + + This OID is used when a password-based encryption in CBC mode based + on SHA-1 and the SEED block cipher is provided. The details of the + Password-Based Encryption (PBE) computation are well described in + Section 6.1 of [RFC2898]. + +3. Security Considerations + + No security problem has been found on SEED. See [ISOSEED] and + [CRYPTREC]. + + + + + + +Lee, et al. Informational [Page 6] + +RFC 4269 The SEED Encryption Algorithm December 2005 + + +4. References + +4.1. Normative References + + [TTASSEED] Telecommunications Technology Association(TTA),"128-bit + Symmetric Block Cipher (SEED)", TTAS.KO-12.0004, + September, 1998 (In Korean) + http://www.tta.or.kr/English/new/main/index.htm + + [RFC2898] Kaliski, B., "PKCS #5: Password-Based Cryptography + Specification Version 2.0", RFC 2898, September 2000. + +4.2. Informative References + + [ISOSEED] ISO/IEC, ISO/IEC JTC1/SC 27 N 256r1, "National Body + contributions on NP 18033 Encryption algorithms in + response to document SC 27 N 2563", October, 2000 + + [CRYPTREC] Information-technology Promotion Agency (IPA), Japan, + CRYPTREC. "SEED Evaluation Report", February, 2002 + http://www.kisa.or.kr/seed/data/Document_pdf/ + SEED_Evaluation_Report_by_CRYPTREC.pdf + +5. Acknowledgements + + Alfred Hoenes (ah@tr-sys.de) has contributed significantly to work on + the definitions of R1', Z, X, and SS-boxes. Thanks for his + contribution to this document. + + + + + + + + + + + + + + + + + + + + + + + +Lee, et al. Informational [Page 7] + +RFC 4269 The SEED Encryption Algorithm December 2005 + + +6. Authors' Addresses + + Hyangjin Lee + Korea Information Security Agency + 78, Garak-Dong, Songpa-Gu, Seoul, 138-803 + REPUBLIC OF KOREA + + Phone: +82-2-405-5446 + Fax: +82-2-405-5319 + EMail: jiinii@kisa.or.kr + + + Sungjae Lee + Korea Information Security Agency + + Phone: +82-2-405-5243 + Fax: +82-2-405-5499 + EMail: sjlee@kisa.or.kr + + + Jaeho Yoon + Korea Information Security Agency + + Phone: +82-2-405-5434 + FAX: +82-2-405-5219 + EMail: jhyoon@kisa.or.kr + + + Donghyeon Cheon + SEC Laboratory + + Phone: +82-31-788-3161 + FAX: +82-31-707-4017 + EMail: dhcheon@mmaa.or.kr + + + Jaeil Lee + Korea Information Security Agency + + Phone: +82-2-405-5300 + FAX: +82-2-405-5219 + EMail: jilee@kisa.or.kr + + + + + + + + + +Lee, et al. Informational [Page 8] + +RFC 4269 The SEED Encryption Algorithm December 2005 + + +Appendix A. S-Boxes + + In this part, all data are hexadecimal numbers (not prefixed by + "0x"). + +A.1. S-Boxes(two original S-boxes) + + - S-Box S0 + + A9, 85, D6, D3, 54, 1D, AC, 25, 5D, 43, 18, 1E, 51, FC, CA, 63, 28, + 44, 20, 9D, E0, E2, C8, 17, A5, 8F, 03, 7B, BB, 13, D2, EE, 70, 8C, + 3F, A8, 32, DD, F6, 74, EC, 95, 0B, 57, 5C, 5B, BD, 01, 24, 1C, 73, + 98, 10, CC, F2, D9, 2C, E7, 72, 83, 9B, D1, 86, C9, 60, 50, A3, EB, + 0D, B6, 9E, 4F, B7, 5A, C6, 78, A6, 12, AF, D5, 61, C3, B4, 41, 52, + 7D, 8D, 08, 1F, 99, 00, 19, 04, 53, F7, E1, FD, 76, 2F, 27, B0, 8B, + 0E, AB, A2, 6E, 93, 4D, 69, 7C, 09, 0A, BF, EF, F3, C5, 87, 14, FE, + 64, DE, 2E, 4B, 1A, 06, 21, 6B, 66, 02, F5, 92, 8A, 0C, B3, 7E, D0, + 7A, 47, 96, E5, 26, 80, AD, DF, A1, 30, 37, AE, 36, 15, 22, 38, F4, + A7, 45, 4C, 81, E9, 84, 97, 35, CB, CE, 3C, 71, 11, C7, 89, 75, FB, + DA, F8, 94, 59, 82, C4, FF, 49, 39, 67, C0, CF, D7, B8, 0F, 8E, 42, + 23, 91, 6C, DB, A4, 34, F1, 48, C2, 6F, 3D, 2D, 40, BE, 3E, BC, C1, + AA, BA, 4E, 55, 3B, DC, 68, 7F, 9C, D8, 4A, 56, 77, A0, ED, 46, B5, + 2B, 65, FA, E3, B9, B1, 9F, 5E, F9, E6, B2, 31, EA, 6D, 5F, E4, F0, + CD, 88, 16, 3A, 58, D4, 62, 29, 07, 33, E8, 1B, 05, 79, 90, 6A, 2A, + 9A + + - S-Box S1 + + 38, E8, 2D, A6, CF, DE, B3, B8, AF, 60, 55, C7, 44, 6F, 6B, 5B, C3, + 62, 33, B5, 29, A0, E2, A7, D3, 91, 11, 06, 1C, BC, 36, 4B, EF, 88, + 6C, A8, 17, C4, 16, F4, C2, 45, E1, D6, 3F, 3D, 8E, 98, 28, 4E, F6, + 3E, A5, F9, 0D, DF, D8, 2B, 66, 7A, 27, 2F, F1, 72, 42, D4, 41, C0, + 73, 67, AC, 8B, F7, AD, 80, 1F, CA, 2C, AA, 34, D2, 0B, EE, E9, 5D, + 94, 18, F8, 57, AE, 08, C5, 13, CD, 86, B9, FF, 7D, C1, 31, F5, 8A, + 6A, B1, D1, 20, D7, 02, 22, 04, 68, 71, 07, DB, 9D, 99, 61, BE, E6, + 59, DD, 51, 90, DC, 9A, A3, AB, D0, 81, 0F, 47, 1A, E3, EC, 8D, BF, + 96, 7B, 5C, A2, A1, 63, 23, 4D, C8, 9E, 9C, 3A, 0C, 2E, BA, 6E, 9F, + 5A, F2, 92, F3, 49, 78, CC, 15, FB, 70, 75, 7F, 35, 10, 03, 64, 6D, + C6, 74, D5, B4, EA, 09, 76, 19, FE, 40, 12, E0, BD, 05, FA, 01, F0, + 2A, 5E, A9, 56, 43, 85, 14, 89, 9B, B0, E5, 48, 79, 97, FC, 1E, 82, + 21, 8C, 1B, 5F, 77, 54, B2, 1D, 25, 4F, 00, 46, ED, 58, 52, EB, 7E, + DA, C9, FD, 30, 95, 65, 3C, B6, E4, BB, 7C, 0E, 50, 39, 26, 32, 84, + 69, 93, 37, E7, 24, A4, CB, 53, 0A, 87, D9, 4C, 83, 8F, CE, 3B, 4A, + B7 + + + + + + + +Lee, et al. Informational [Page 9] + +RFC 4269 The SEED Encryption Algorithm December 2005 + + +A.2. S-Boxes (four extended S-boxes) + +- S-Box SS0 + +2989A1A8,05858184,16C6D2D4,13C3D3D0,14445054,1D0D111C,2C8CA0AC,25052124, +1D4D515C,03434340,18081018,1E0E121C,11415150,3CCCF0FC,0ACAC2C8,23436360, +28082028,04444044,20002020,1D8D919C,20C0E0E0,22C2E2E0,08C8C0C8,17071314, +2585A1A4,0F8F838C,03030300,3B4B7378,3B8BB3B8,13031310,12C2D2D0,2ECEE2EC, +30407070,0C8C808C,3F0F333C,2888A0A8,32023230,1DCDD1DC,36C6F2F4,34447074, +2CCCE0EC,15859194,0B0B0308,17475354,1C4C505C,1B4B5358,3D8DB1BC,01010100, +24042024,1C0C101C,33437370,18889098,10001010,0CCCC0CC,32C2F2F0,19C9D1D8, +2C0C202C,27C7E3E4,32427270,03838380,1B8B9398,11C1D1D0,06868284,09C9C1C8, +20406060,10405050,2383A3A0,2BCBE3E8,0D0D010C,3686B2B4,1E8E929C,0F4F434C, +3787B3B4,1A4A5258,06C6C2C4,38487078,2686A2A4,12021210,2F8FA3AC,15C5D1D4, +21416160,03C3C3C0,3484B0B4,01414140,12425250,3D4D717C,0D8D818C,08080008, +1F0F131C,19899198,00000000,19091118,04040004,13435350,37C7F3F4,21C1E1E0, +3DCDF1FC,36467274,2F0F232C,27072324,3080B0B0,0B8B8388,0E0E020C,2B8BA3A8, +2282A2A0,2E4E626C,13839390,0D4D414C,29496168,3C4C707C,09090108,0A0A0208, +3F8FB3BC,2FCFE3EC,33C3F3F0,05C5C1C4,07878384,14041014,3ECEF2FC,24446064, +1ECED2DC,2E0E222C,0B4B4348,1A0A1218,06060204,21012120,2B4B6368,26466264, +02020200,35C5F1F4,12829290,0A8A8288,0C0C000C,3383B3B0,3E4E727C,10C0D0D0, +3A4A7278,07474344,16869294,25C5E1E4,26062224,00808080,2D8DA1AC,1FCFD3DC, +2181A1A0,30003030,37073334,2E8EA2AC,36063234,15051114,22022220,38083038, +34C4F0F4,2787A3A4,05454144,0C4C404C,01818180,29C9E1E8,04848084,17879394, +35053134,0BCBC3C8,0ECEC2CC,3C0C303C,31417170,11011110,07C7C3C4,09898188, +35457174,3BCBF3F8,1ACAD2D8,38C8F0F8,14849094,19495158,02828280,04C4C0C4, +3FCFF3FC,09494148,39093138,27476364,00C0C0C0,0FCFC3CC,17C7D3D4,3888B0B8, +0F0F030C,0E8E828C,02424240,23032320,11819190,2C4C606C,1BCBD3D8,2484A0A4, +34043034,31C1F1F0,08484048,02C2C2C0,2F4F636C,3D0D313C,2D0D212C,00404040, +3E8EB2BC,3E0E323C,3C8CB0BC,01C1C1C0,2A8AA2A8,3A8AB2B8,0E4E424C,15455154, +3B0B3338,1CCCD0DC,28486068,3F4F737C,1C8C909C,18C8D0D8,0A4A4248,16465254, +37477374,2080A0A0,2DCDE1EC,06464244,3585B1B4,2B0B2328,25456164,3ACAF2F8, +23C3E3E0,3989B1B8,3181B1B0,1F8F939C,1E4E525C,39C9F1F8,26C6E2E4,3282B2B0, +31013130,2ACAE2E8,2D4D616C,1F4F535C,24C4E0E4,30C0F0F0,0DCDC1CC,08888088, +16061214,3A0A3238,18485058,14C4D0D4,22426260,29092128,07070304,33033330, +28C8E0E8,1B0B1318,05050104,39497178,10809090,2A4A6268,2A0A2228,1A8A9298 + +- S-Box SS1 + +38380830,E828C8E0,2C2D0D21,A42686A2,CC0FCFC3,DC1ECED2,B03383B3,B83888B0, +AC2F8FA3,60204060,54154551,C407C7C3,44044440,6C2F4F63,682B4B63,581B4B53, +C003C3C3,60224262,30330333,B43585B1,28290921,A02080A0,E022C2E2,A42787A3, +D013C3D3,90118191,10110111,04060602,1C1C0C10,BC3C8CB0,34360632,480B4B43, +EC2FCFE3,88088880,6C2C4C60,A82888A0,14170713,C404C4C0,14160612,F434C4F0, +C002C2C2,44054541,E021C1E1,D416C6D2,3C3F0F33,3C3D0D31,8C0E8E82,98188890, +28280820,4C0E4E42,F436C6F2,3C3E0E32,A42585A1,F839C9F1,0C0D0D01,DC1FCFD3, +D818C8D0,282B0B23,64264662,783A4A72,24270723,2C2F0F23,F031C1F1,70324272, +40024242,D414C4D0,40014141,C000C0C0,70334373,64274763,AC2C8CA0,880B8B83, + + + +Lee, et al. Informational [Page 10] + +RFC 4269 The SEED Encryption Algorithm December 2005 + + +F437C7F3,AC2D8DA1,80008080,1C1F0F13,C80ACAC2,2C2C0C20,A82A8AA2,34340430, +D012C2D2,080B0B03,EC2ECEE2,E829C9E1,5C1D4D51,94148490,18180810,F838C8F0, +54174753,AC2E8EA2,08080800,C405C5C1,10130313,CC0DCDC1,84068682,B83989B1, +FC3FCFF3,7C3D4D71,C001C1C1,30310131,F435C5F1,880A8A82,682A4A62,B03181B1, +D011C1D1,20200020,D417C7D3,00020202,20220222,04040400,68284860,70314171, +04070703,D81BCBD3,9C1D8D91,98198991,60214161,BC3E8EB2,E426C6E2,58194951, +DC1DCDD1,50114151,90108090,DC1CCCD0,981A8A92,A02383A3,A82B8BA3,D010C0D0, +80018181,0C0F0F03,44074743,181A0A12,E023C3E3,EC2CCCE0,8C0D8D81,BC3F8FB3, +94168692,783B4B73,5C1C4C50,A02282A2,A02181A1,60234363,20230323,4C0D4D41, +C808C8C0,9C1E8E92,9C1C8C90,383A0A32,0C0C0C00,2C2E0E22,B83A8AB2,6C2E4E62, +9C1F8F93,581A4A52,F032C2F2,90128292,F033C3F3,48094941,78384870,CC0CCCC0, +14150511,F83BCBF3,70304070,74354571,7C3F4F73,34350531,10100010,00030303, +64244460,6C2D4D61,C406C6C2,74344470,D415C5D1,B43484B0,E82ACAE2,08090901, +74364672,18190911,FC3ECEF2,40004040,10120212,E020C0E0,BC3D8DB1,04050501, +F83ACAF2,00010101,F030C0F0,282A0A22,5C1E4E52,A82989A1,54164652,40034343, +84058581,14140410,88098981,981B8B93,B03080B0,E425C5E1,48084840,78394971, +94178793,FC3CCCF0,1C1E0E12,80028282,20210121,8C0C8C80,181B0B13,5C1F4F53, +74374773,54144450,B03282B2,1C1D0D11,24250521,4C0F4F43,00000000,44064642, +EC2DCDE1,58184850,50124252,E82BCBE3,7C3E4E72,D81ACAD2,C809C9C1,FC3DCDF1, +30300030,94158591,64254561,3C3C0C30,B43686B2,E424C4E0,B83B8BB3,7C3C4C70, +0C0E0E02,50104050,38390931,24260622,30320232,84048480,68294961,90138393, +34370733,E427C7E3,24240420,A42484A0,C80BCBC3,50134353,080A0A02,84078783, +D819C9D1,4C0C4C40,80038383,8C0F8F83,CC0ECEC2,383B0B33,480A4A42,B43787B3 + +- S-Box SS2 + +A1A82989,81840585,D2D416C6,D3D013C3,50541444,111C1D0D,A0AC2C8C,21242505, +515C1D4D,43400343,10181808,121C1E0E,51501141,F0FC3CCC,C2C80ACA,63602343, +20282808,40440444,20202000,919C1D8D,E0E020C0,E2E022C2,C0C808C8,13141707, +A1A42585,838C0F8F,03000303,73783B4B,B3B83B8B,13101303,D2D012C2,E2EC2ECE, +70703040,808C0C8C,333C3F0F,A0A82888,32303202,D1DC1DCD,F2F436C6,70743444, +E0EC2CCC,91941585,03080B0B,53541747,505C1C4C,53581B4B,B1BC3D8D,01000101, +20242404,101C1C0C,73703343,90981888,10101000,C0CC0CCC,F2F032C2,D1D819C9, +202C2C0C,E3E427C7,72703242,83800383,93981B8B,D1D011C1,82840686,C1C809C9, +60602040,50501040,A3A02383,E3E82BCB,010C0D0D,B2B43686,929C1E8E,434C0F4F, +B3B43787,52581A4A,C2C406C6,70783848,A2A42686,12101202,A3AC2F8F,D1D415C5, +61602141,C3C003C3,B0B43484,41400141,52501242,717C3D4D,818C0D8D,00080808, +131C1F0F,91981989,00000000,11181909,00040404,53501343,F3F437C7,E1E021C1, +F1FC3DCD,72743646,232C2F0F,23242707,B0B03080,83880B8B,020C0E0E,A3A82B8B, +A2A02282,626C2E4E,93901383,414C0D4D,61682949,707C3C4C,01080909,02080A0A, +B3BC3F8F,E3EC2FCF,F3F033C3,C1C405C5,83840787,10141404,F2FC3ECE,60642444, +D2DC1ECE,222C2E0E,43480B4B,12181A0A,02040606,21202101,63682B4B,62642646, +02000202,F1F435C5,92901282,82880A8A,000C0C0C,B3B03383,727C3E4E,D0D010C0, +72783A4A,43440747,92941686,E1E425C5,22242606,80800080,A1AC2D8D,D3DC1FCF, +A1A02181,30303000,33343707,A2AC2E8E,32343606,11141505,22202202,30383808, +F0F434C4,A3A42787,41440545,404C0C4C,81800181,E1E829C9,80840484,93941787, +31343505,C3C80BCB,C2CC0ECE,303C3C0C,71703141,11101101,C3C407C7,81880989, +71743545,F3F83BCB,D2D81ACA,F0F838C8,90941484,51581949,82800282,C0C404C4, + + + +Lee, et al. Informational [Page 11] + +RFC 4269 The SEED Encryption Algorithm December 2005 + + +F3FC3FCF,41480949,31383909,63642747,C0C000C0,C3CC0FCF,D3D417C7,B0B83888, +030C0F0F,828C0E8E,42400242,23202303,91901181,606C2C4C,D3D81BCB,A0A42484, +30343404,F1F031C1,40480848,C2C002C2,636C2F4F,313C3D0D,212C2D0D,40400040, +B2BC3E8E,323C3E0E,B0BC3C8C,C1C001C1,A2A82A8A,B2B83A8A,424C0E4E,51541545, +33383B0B,D0DC1CCC,60682848,737C3F4F,909C1C8C,D0D818C8,42480A4A,52541646, +73743747,A0A02080,E1EC2DCD,42440646,B1B43585,23282B0B,61642545,F2F83ACA, +E3E023C3,B1B83989,B1B03181,939C1F8F,525C1E4E,F1F839C9,E2E426C6,B2B03282, +31303101,E2E82ACA,616C2D4D,535C1F4F,E0E424C4,F0F030C0,C1CC0DCD,80880888, +12141606,32383A0A,50581848,D0D414C4,62602242,21282909,03040707,33303303, +E0E828C8,13181B0B,01040505,71783949,90901080,62682A4A,22282A0A,92981A8A + +- S-Box SS3 + +08303838,C8E0E828,0D212C2D,86A2A426,CFC3CC0F,CED2DC1E,83B3B033,88B0B838, +8FA3AC2F,40606020,45515415,C7C3C407,44404404,4F636C2F,4B63682B,4B53581B, +C3C3C003,42626022,03333033,85B1B435,09212829,80A0A020,C2E2E022,87A3A427, +C3D3D013,81919011,01111011,06020406,0C101C1C,8CB0BC3C,06323436,4B43480B, +CFE3EC2F,88808808,4C606C2C,88A0A828,07131417,C4C0C404,06121416,C4F0F434, +C2C2C002,45414405,C1E1E021,C6D2D416,0F333C3F,0D313C3D,8E828C0E,88909818, +08202828,4E424C0E,C6F2F436,0E323C3E,85A1A425,C9F1F839,0D010C0D,CFD3DC1F, +C8D0D818,0B23282B,46626426,4A72783A,07232427,0F232C2F,C1F1F031,42727032, +42424002,C4D0D414,41414001,C0C0C000,43737033,47636427,8CA0AC2C,8B83880B, +C7F3F437,8DA1AC2D,80808000,0F131C1F,CAC2C80A,0C202C2C,8AA2A82A,04303434, +C2D2D012,0B03080B,CEE2EC2E,C9E1E829,4D515C1D,84909414,08101818,C8F0F838, +47535417,8EA2AC2E,08000808,C5C1C405,03131013,CDC1CC0D,86828406,89B1B839, +CFF3FC3F,4D717C3D,C1C1C001,01313031,C5F1F435,8A82880A,4A62682A,81B1B031, +C1D1D011,00202020,C7D3D417,02020002,02222022,04000404,48606828,41717031, +07030407,CBD3D81B,8D919C1D,89919819,41616021,8EB2BC3E,C6E2E426,49515819, +CDD1DC1D,41515011,80909010,CCD0DC1C,8A92981A,83A3A023,8BA3A82B,C0D0D010, +81818001,0F030C0F,47434407,0A12181A,C3E3E023,CCE0EC2C,8D818C0D,8FB3BC3F, +86929416,4B73783B,4C505C1C,82A2A022,81A1A021,43636023,03232023,4D414C0D, +C8C0C808,8E929C1E,8C909C1C,0A32383A,0C000C0C,0E222C2E,8AB2B83A,4E626C2E, +8F939C1F,4A52581A,C2F2F032,82929012,C3F3F033,49414809,48707838,CCC0CC0C, +05111415,CBF3F83B,40707030,45717435,4F737C3F,05313435,00101010,03030003, +44606424,4D616C2D,C6C2C406,44707434,C5D1D415,84B0B434,CAE2E82A,09010809, +46727436,09111819,CEF2FC3E,40404000,02121012,C0E0E020,8DB1BC3D,05010405, +CAF2F83A,01010001,C0F0F030,0A22282A,4E525C1E,89A1A829,46525416,43434003, +85818405,04101414,89818809,8B93981B,80B0B030,C5E1E425,48404808,49717839, +87939417,CCF0FC3C,0E121C1E,82828002,01212021,8C808C0C,0B13181B,4F535C1F, +47737437,44505414,82B2B032,0D111C1D,05212425,4F434C0F,00000000,46424406, +CDE1EC2D,48505818,42525012,CBE3E82B,4E727C3E,CAD2D81A,C9C1C809,CDF1FC3D, +00303030,85919415,45616425,0C303C3C,86B2B436,C4E0E424,8BB3B83B,4C707C3C, +0E020C0E,40505010,09313839,06222426,02323032,84808404,49616829,83939013, +07333437,C7E3E427,04202424,84A0A424,CBC3C80B,43535013,0A02080A,87838407, +C9D1D819,4C404C0C,83838003,8F838C0F,CEC2CC0E,0B33383B,4A42480A,87B3B437 + + + + + + +Lee, et al. Informational [Page 12] + +RFC 4269 The SEED Encryption Algorithm December 2005 + + +Appendix B. Test Vectors + + This appendix provides test vectors for the SEED cipher described in + this document. + + All data are hexadecimal numbers (not prefixed by "0x"). + +B.1. + + Key : 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 + Plaintext : 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F + Ciphertext : 5E BA C6 E0 05 4E 16 68 19 AF F1 CC 6D 34 6C DB + + Intermediate Value + ------------------------------------------------------------------ + Ki0 Ki1 L0 L1 R0 R1 + ================================================================== + Round 1 : 7C8F8C7E C737A22C | 00010203 04050607 08090A0B 0C0D0E0F + Round 2 : FF276CDB A7CA684A | 08090A0B 0C0D0E0F 8081BC57 C4EA8A1F + Round 3 : 2F9D01A1 70049E41 | 8081BC57 C4EA8A1F 117A8B07 D7358C24 + Round 4 : AE59B3C4 4245E90C | 117A8B07 D7358C24 D1738C94 7326CAB0 + Round 5 : A1D6400F DBC1394E | D1738C94 7326CAB0 577ECE6D 1F8433EC + Round 6 : 85963508 0C5F1FCB | 577ECE6D 1F8433EC 910F62AB DDA096C1 + Round 7 : B684BDA7 61A4AEAE | 910F62AB DDA096C1 EA4D39B4 B17B1938 + Round 8 : D17E0741 FEE90AA1 | EA4D39B4 B17B1938 B04E251F 97D7442C + Round 9 : 76CC05D5 E97A7394 | B04E251F 97D7442C B86D31BF A5988C06 + Round 10 : 50AC6F92 1B2666E5 | B86D31BF A5988C06 9008EABF 38DF7430 + Round 11 : 65B7904A 8EC3A7B3 | 9008EABF 38DF7430 33E47DE0 54EFF76C + Round 12 : 2F7E2E22 A2B121B9 | 33E47DE0 54EFF76C 6BE9C434 BF3F378A + Round 13 : 4D0BFDE4 4E888D9B | 6BE9C434 BF3F378A B8DC3842 03A02D33 + Round 14 : 631C8DDC 4378A6C4 | B8DC3842 03A02D33 6679FCF7 9791DFCB + Round 15 : 216AF65F 7878C031 | 6679FCF7 9791DFCB 1A415792 A02B8C54 + Round 16 : 71891150 98B255B0 | 1A415792 A02B8C54 19AFF1CC 6D346CDB + +B.2. + + Key : 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F + Plaintext : 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 + Ciphertext : C1 1F 22 F2 01 40 50 50 84 48 35 97 E4 37 0F 43 + + Intermediate Value + ------------------------------------------------------------------ + Ki0 Ki1 L0 L1 R0 R1 + ================================================================== + Round 1 : C119F584 5AE033A0 | 00000000 00000000 00000000 00000000 + Round 2 : 62947390 A600AD14 | 00000000 00000000 9D8DB62C 911F0C19 + Round 3 : F6F6544E 596C4B49 | 9D8DB62C 911F0C19 21229A97 4AB4B7B8 + Round 4 : C1A3DE02 CE483C49 | 21229A97 4AB4B7B8 5A27B404 899D7315 + + + +Lee, et al. Informational [Page 13] + +RFC 4269 The SEED Encryption Algorithm December 2005 + + + Round 5 : 5E742E6D 7E25163D | 5A27B404 899D7315 B8489E76 BA0EF3EA + Round 6 : 8299D2B4 790A46CE | B8489E76 BA0EF3EA 04A3DF29 31A27FB4 + Round 7 : EA67D836 55F354F2 | 04A3DF29 31A27FB4 EC9C17BF 81AA2AA0 + Round 8 : C47329FB F50DB634 | EC9C17BF 81AA2AA0 4FA74E8D CDB21BB8 + Round 9 : 2BD30235 51679CE6 | 4FA74E8D CDB21BB8 D93492FE 4F71A4DA + Round 10 : FA8D6B76 A9F37E02 | D93492FE 4F71A4DA B14053D9 A911379B + Round 11 : 8B99CC60 0F6092D4 | B14053D9 A911379B 5A7024D6 3905668B + Round 12 : BDAEFCFA 489C2242 | 5A7024D6 3905668B 605C8C3A 73DFBB75 + Round 13 : F6357C14 CFCCB126 | 605C8C3A 73DFBB75 40282F39 31CB8987 + Round 14 : A0AA6D85 F8C10774 | 40282F39 31CB8987 E9F834A8 3B9586D4 + Round 15 : 47F4FEC5 353AE1BA | E9F834A8 3B9586D4 4B60324B 761C9958 + Round 16 : FECCEA48 A4EF9F9B | 4B60324B 761C9958 84483597 E4370F43 + +B.3. + + Key : 47 06 48 08 51 E6 1B E8 5D 74 BF B3 FD 95 61 85 + Plaintext : 83 A2 F8 A2 88 64 1F B9 A4 E9 A5 CC 2F 13 1C 7D + Ciphertext : EE 54 D1 3E BC AE 70 6D 22 6B C3 14 2C D4 0D 4A + + Intermediate Value + ------------------------------------------------------------------ + Ki0 Ki1 L0 L1 R0 R1 + ================================================================== + Round 1 : 56BE4A0F E9F62877 | 83A2F8A2 88641FB9 A4E9A5CC 2F131C7D + Round 2 : 68BCB66C 078911DD | A4E9A5CC 2F131C7D 7CE5F012 47F8C1E6 + Round 3 : 5B82740B FD24D09B | 7CE5F012 47F8C1E6 AAC99520 609F4CB7 + Round 4 : 8D608015 A120E0BE | AAC99520 609F4CB7 3E126D1F 44FA99F0 + Round 5 : 810A75AE 1BF223E5 | 3E126D1F 44FA99F0 11716365 9BA775AC + Round 6 : F9C0D2D0 0F676C02 | 11716365 9BA775AC 32C9838F BA5757CB + Round 7 : 8F9B5C84 8A7C8DDD | 32C9838F BA5757CB 77E00C64 CF9F6B32 + Round 8 : D4AB4896 18E93447 | 77E00C64 CF9F6B32 3F09B1F7 DE7D6D58 + Round 9 : CF090F51 5A4C8202 | 3F09B1F7 DE7D6D58 300E5CAA D0BF2345 + Round 10 : 4EC3196F 61B1A0DC | 300E5CAA D0BF2345 9574FDD7 4DF050D1 + Round 11 : 244E07C1 D0D10B12 | 9574FDD7 4DF050D1 A15EDA6F 624265FD + Round 12 : 69917C6C 7FF94FB3 | A15EDA6F 624265FD 9F39B682 D841C76F + Round 13 : 9A7EB482 723B5738 | 9F39B682 D841C76F EEBBAD8B C1F488EF + Round 14 : B97522C5 39CC6349 | EEBBAD8B C1F488EF 45CF5D4E BEEA4AA2 + Round 15 : FFC2AFD5 1412E731 | 45CF5D4E BEEA4AA2 43B7FE1B BCF87781 + Round 16 : A9AF7241 A3E67359 | 43B7FE1B BCF87781 226BC314 2CD40D4A + + + + + + + + + + + + +Lee, et al. Informational [Page 14] + +RFC 4269 The SEED Encryption Algorithm December 2005 + + +B.4. + + Key : 28 DB C3 BC 49 FF D8 7D CF A5 09 B1 1D 42 2B E7 + Plaintext : B4 1E 6B E2 EB A8 4A 14 8E 2E ED 84 59 3C 5E C7 + Ciphertext : 9B 9B 7B FC D1 81 3C B9 5D 0B 36 18 F4 0F 51 22 + + Intermediate Value + ------------------------------------------------------------------ + Ki0 Ki1 L0 L1 R0 R1 + ================================================================== + Round 1 : B2B11B63 2EE9E2D1 | B41E6BE2 EBA84A14 8E2EED84 593C5EC7 + Round 2 : 11967260 71A62F24 | 8E2EED84 593C5EC7 1B31F2F7 3DDE00BA + Round 3 : 2E017A5A 35DAD7A7 | 1B31F2F7 3DDE00BA 35CC49C0 2AFB59EA + Round 4 : 1B2AB5FF A3ADA69F | 35CC49C0 2AFB59EA D7AB53AA AE82F1C7 + Round 5 : 519C9903 DA90AAEE | D7AB53AA AE82F1C7 24139958 B840E56F + Round 6 : 29FD95AD B94C3F13 | 24139958 B840E56F 24AB5291 544C9DBA + Round 7 : 6F629D19 8ACE692F | 24AB5291 544C9DBA E8152994 75D0B424 + Round 8 : 30A26E73 2F22338E | E8152994 75D0B424 A2CD1153 F32BB23A + Round 9 : 9721073A 98EE8DAE | A2CD1153 F32BB23A C386008B E3257731 + Round 10 : C597A8A9 27DCDC97 | C386008B E3257731 98396BFD 814F8972 + Round 11 : F5163A00 5FFD0003 | 98396BFD 814F8972 E74D2D0D 11D889D1 + Round 12 : 5CBE65DA A73403E4 | E74D2D0D 11D889D1 29D8C7B3 D1B71C0C + Round 13 : 7D5CF070 1D3B8092 | 29D8C7B3 D1B71C0C C4E692C2 D2F57F18 + Round 14 : 388C702B 1BAA4945 | C4E692C2 D2F57F18 2FAFB300 5F0C4BFF + Round 15 : 87D1AB5A FA13FB5C | 2FAFB300 5F0C4BFF 60E5F17C 5626BB68 + Round 16 : C97D7EED 90724A6E | 60E5F17C 5626BB68 5D0B3618 F40F5122 + + + + + + + + + + + + + + + + + + + + + + + + + +Lee, et al. Informational [Page 15] + +RFC 4269 The SEED Encryption Algorithm December 2005 + + +Full Copyright Statement + + Copyright (C) The Internet Society (2005). + + This document is subject to the rights, licenses and restrictions + contained in BCP 78, and except as set forth therein, the authors + retain all their rights. + + This document and the information contained herein are provided on an + "AS IS" basis and THE CONTRIBUTOR, THE ORGANIZATION HE/SHE REPRESENTS + OR IS SPONSORED BY (IF ANY), THE INTERNET SOCIETY AND THE INTERNET + ENGINEERING TASK FORCE DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, + INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE + INFORMATION HEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED + WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. + +Intellectual Property + + The IETF takes no position regarding the validity or scope of any + Intellectual Property Rights or other rights that might be claimed to + pertain to the implementation or use of the technology described in + this document or the extent to which any license under such rights + might or might not be available; nor does it represent that it has + made any independent effort to identify any such rights. Information + on the procedures with respect to rights in RFC documents can be + found in BCP 78 and BCP 79. + + Copies of IPR disclosures made to the IETF Secretariat and any + assurances of licenses to be made available, or the result of an + attempt made to obtain a general license or permission for the use of + such proprietary rights by implementers or users of this + specification can be obtained from the IETF on-line IPR repository at + http://www.ietf.org/ipr. + + The IETF invites any interested party to bring to its attention any + copyrights, patents or patent applications, or other proprietary + rights that may cover technology that may be required to implement + this standard. Please address the information to the IETF at ietf- + ipr@ietf.org. + +Acknowledgement + + Funding for the RFC Editor function is currently provided by the + Internet Society. + + + + + + + +Lee, et al. Informational [Page 16] + |