Missing block ciphers

[newpavlov]

List of "would be nice to have" block ciphers:

• ARIA (aria: initial implementaion of the ARIA cipher (RFC 5794) #340)
• Camellia (Add implementation of Camellia #293)
• CAST5 (feat: implement CAST5 based on RFC 2144 #36)
• CAST6 (cast6: initial crate #384)
• DES (Implemented DES #2)
• IDEA (Add IDEA cipher #35)
• Kalyna
• Kuznyechik
• Magma
• RC2 (RC2 cipher #4)
• RC5 (initial rc5 impl #346)
• RC6
• Rijndael (additional key/block sizes beyond AES)
• Serpent (Added Serpent #60)
• Simon (feat: Implement Simon #523)
• Speck (speck: initial crate #297)
• Threefish (Added threefish #5)
• Twofish (Twofish cipher #7)
• XTEA (XTEA implementation #422)

[tvladyslav]

What about SPECK?
https://en.wikipedia.org/wiki/Speck_%28cipher%29

[newpavlov]

Missed it for some reason while compiling the list. Added Speck and Simon to it.

[k3d3]

Is Rijndael/AES being covered?

[newpavlov]

AES is present in the rust-crypto codebase, so it's already "implemented", this is why I haven't included it into this list. But it's not the easiest code to work with and better implementations exist (e.g. one in the ring), so for now it's not a highest priority for me.

[gsingh93]

I'm claiming DES, just need a bit of time to finish up Grostl over in the hashes repo before starting it.

[Trojan295]

I started to work on the RC2 cipher.

[Trojan295]

BTW. What about modes of operation for the block ciphers (CBC, OFB, etc.)? In this repo we have only the raw block ciphers. How do we progress to make them usable in different modes?

[newpavlov]

@Trojan295
Sorry for the late answer. They will be implemented generically, though not sure if they should be placed here or in the traits repo, also I haven't yet decided on how exactly API should look like. We will probably need some kind of generic trait which will unite block ciphers under different modes of operation and stream ciphers.

[Trojan295]

I will start working on the Serpent implementation.

[link2xt]

Working on twofish, PR #7

It is used in passwordsafe password manager, I wanted to port it to Rust but twofish package on crates.io seems to be reserved for this project and there is no implementation yet.

[dignifiedquire]

Implemented Cast5 in #36

[WildCryptoFox]

OCB3, a solid single-pass high-performance CAESAR candidate, could do with a Rust implementation.

The ciphertext is expanded by a variable length tag (whose tag length is committed). Only slightly slower than unauthenticated CTR, OCB3 could make a useful alternative when the costs of nonce-misuse resistance of HCTR or SIV are too high for an application (doubtful but nice to have). OCB3 does not resist nonce-misuse, nor does it aim for beyond birthday bound security.

The biggest issue harming OCB's deployment is its patent; but Rogaway has public free licenses available since 2013 and is open to negotiating additional licenses if needed.

License 1 — License for Open-Source Software Implementations of OCB (Jan 9, 2013)
Under this license, you are authorized to make, use, and distribute open-source software implementations of OCB. This license terminates for you if you sue someone over their open-source software implementation of OCB claiming that you have a patent covering their implementation.

License 2 — General License for Non-Military Software Implementations OCB (Jan 10, 2013).
This license does not authorize any military use of OCB. Aside from military uses, you are authorized to make, use, and distribute (1) any software implementation of OCB and (2) non-software implementations of OCB for noncommercial or research purposes. You are required to include notice of this license to users of your work so that they are aware of the prohibition against military use. This license terminates for you if you sue someone over an implementation of OCB authorized by this license claiming that you have a patent covering their implementation.

[tarcieri]

Unfortunately Rogaway's patents aren't the only ones that matter:

Jutla (IBM)— 6,963,976, 7,093,126, and 8,107,620—and of Gligor and Donescu (VDG)—6,973,187.

https://web.cs.ucdavis.edu/~rogaway/ocb/patent-jutla-1.pdf
https://web.cs.ucdavis.edu/~rogaway/ocb/patent-jutla-2.pdf
https://web.cs.ucdavis.edu/~rogaway/ocb/patent-jutla-3.pdf
https://web.cs.ucdavis.edu/~rogaway/ocb/patent-gligor-1.pdf