The National Cryptographic Standards 2 Sharing Notice: White Cryptographic Primitives 2.1 Symmetric Algorithms 2.1.1 Stream Cipher Algorithms Accepted stream cipher algorithms: • SNOW 2.0 (ISO/IEC 18033-4) . 128-bit key length for MODERATE. . 256-bit key length for ADVANCED. • SOSEMANUK1 (from eSTREAM project) . 128-bit and 256-bit key lengths for MODERATE. . Not accepted for ADVANCED. Common notes: • Initialization Vector (IV) must be at least 128 bits. • Stream ciphers must be used with a different IV for each key. • A key must be used only once. • Valid decryption must never be relied on for authenticity. 2.1.2 Block Ciphers Algorithms Accepted block cipher algorithms: • Advanced Encryption Standards (AES) as in FIPS-197 . 128-bit and 192-bit key lengths for MODERATE. . 256-bit key length for ADVANCED. • Camellia (ISO/IEC 18033-3) . 128-bit and 192-bit key lengths for MODERATE. . 256-bit key length for ADVANCED. • Serpent2 . 128-bit and 192-bit key lengths for MODERATE. . 256-bit key length for ADVANCED. C. Berbain et al. “Sosemanuk, a Fast Software-Oriented Stream Cipher.” In: Robshaw M., Billet O. (eds.) New Stream Cipher Designs. LNCS 4986. Springer, 2008. 2 E. Biham, R. Anderson, and L. Knudsen. SERPENT: A new block cipher proposal. In Fast Software Encryption - FSE’98, volume 1372 of Lecture Notes in Computer Science, pages 222–238. Springer-Verlag, 1998. 1 Document Classification: Open 11