🚀 go-pugleaf

In article <92302.153813K390670@ALIJKU11.BITNET> <K390670@ALIJKU11.BITNET> writes:
>The ciphers are DES, FEAL-8 (8 rounds FEAL) and IPES (if it is still
>called IPES, there are rumours Prof. Massey changes the name each week).

I'm pretty sure that IPES is know as IDEA these days.


>I wonder if FEAL-8 (by NTT, Japan) is still considered safe.

No.  In [1] it is mentioned that Differential Cryptanalysis can
break Feal-8 with less than 2000 cipher texts in a chosen plaintext
attack.  Also [2] demonstrates a known plaintext attack on Feal-4
and Feal-6 which use about 1000 and 2000 (respectively) plaintext
blocks, which suggests that Feal-8 might be vulnerable to known
plaintext attacks also.

[1] E. Biham, A. Shamir, "Differentia Cryptanalysys of DES-like
	Cryptosystesm", Proceedings of Crypto'90
[2] A. Tardy-Corfdir, H. Gilbert, "A Known Plaintext attack of
	Feal-4 and Feal-6", Proceedings of Crypto'91


		--Ken Pizzini