www.wikidata.uk-ua.nina.az
Camellia algoritm simetrichnogo blochnogo shifruvannya rozmir bloku 128 bit klyucha 128 192 256 bit odin iz finalistiv yevropejskogo konkursu NESSIE poryad z AES i Shacal 2 rozrobka yaponskih kompanij Nippon Telegraph and Telephone Corporation i Mitsubishi Electric Corporation predstavlenij 10 bereznya 2000 r Sertifikovanij yaponskoyu organizaciyeyu CRYPTREC yak rekomendovanij dlya promislovogo j derzhavnogo vikoristannya algoritm CamelliaRozrobniki Mitsubishi NTTUpershe oprilyudnenij 2000 rikRaundiv 18 abo 24Tip Merezha FejstelyaCamellia ye podalshim rozvitkom algoritmu shifruvannya E2 odnogo z algoritmiv predstavlenih na konkursi AES z vikoristannyam elementiv algoritmu MISTY1 Struktura algoritmu zasnovana na klasichnomu lancyugu Fejstelya z poperednim j finalnim zabilyuvannyam Ciklichna funkciya vikoristovuye nelinijne peretvorennya S bloki blok linijnogo rozsiyuvannya kozhni 16 cikliv pobajtova operaciya XOR i bajtovu perestanovku V zalezhnosti vid dovzhini klyucha maye 18 cikliv 128 bitnij klyuch abo 24 ciklu 192 i 256 bitnij klyuch Pidtrimka algoritmu Camellia vvedena v 2008 roci v brauzeri Mozilla Firefox 3 odnak vidklyuchena v 2014 roci v Mozilla Firefox 33 1 Algoritm zapatentovanij odnak poshiryuyetsya pid ryadom vilnih licenzij zokrema ye chastinoyu proektu OpenSSL Zmist 1 Opis 1 1 Generaciya klyuchiv dopomizhnih 1 2 Shifruvannya 1 3 Dopomizhni funkciyi F FL FLINV 1 4 S bloki 1 5 Rozshifruvannya 2 Priklad shifruvannya 3 Kriptostijkist 4 Zastosuvannya 5 Porivnyannya z analogami 6 Rozrobniki 7 Div takozh 8 Primitki 9 PosilannyaOpis red Generaciya klyuchiv dopomizhnih red Poznachennya Znachennya amp Pobitove I AND Pobitove ABO OR Pobitove viklyuchne ABO XOR lt lt Logichnij zsuv vlivo gt gt Logichnij zsuv vpravo lt lt lt Ciklichnij zsuv vlivo y InversiyaKonstanta ZnachennyaMASK8 0xffMASK32 0xffffffffMASK64 0xffffffffffffffffMASK128 0xffffffffffffffffffffffffffffffffC1 0xA09E667F3BCC908BC2 0xB67AE8584CAA73B2C3 0xC6EF372FE94F82BEC4 0x54FF53A5F1D36F1CC5 0x10E527FADE682D1DC6 0xB05688C2B3E6C1FD1 Klyuch Do rozbivayetsya na 2 128 bitni chastini KL i KR Klyuch KL KR128 K 0192 K gt gt 64 K amp MASK64 lt lt 64 K amp MASK64 256 K gt gt 128 K amp MASK1282 Obchislyuyemo 128 bitni chisla KA i KB div shemu Zminni D1 i D2 64 bitni nbsp Obchislennya Ka i Kb D1 KL KR gt gt 64 D2 KL KR amp MASK64 D2 D2 F D1 C1 D1 D1 F D2 C2 D1 D1 KL gt gt 64 D2 D2 KL amp MASK64 D2 D2 F D1 C3 D1 D1 F D2 C4 KA D1 lt lt 64 D2 D1 KA KR gt gt 64 D2 KA KR amp MASK64 D2 D2 F D1 C5 D1 D1 F D2 C6 KB D1 lt lt 64 D2 3 Obchislyuyemo dopomizhni 64 bitovi klyuchi kw1 kw4 k1 k24 ke1 ke6 v zalezhnosti vid rozmiru klyucha 128 bit kw1 KL lt lt lt 0 gt gt 64 kw2 KL lt lt lt 0 amp MASK64 k1 KA lt lt lt 0 gt gt 64 k2 KA lt lt lt 0 amp MASK64 k3 KL lt lt lt 15 gt gt 64 k4 KL lt lt lt 15 amp MASK64 k5 KA lt lt lt 15 gt gt 64 k6 KA lt lt lt 15 amp MASK64 ke1 KA lt lt lt 30 gt gt 64 ke2 KA lt lt lt 30 amp MASK64 k7 KL lt lt lt 45 gt gt 64 k8 KL lt lt lt 45 amp MASK64 k9 KA lt lt lt 45 gt gt 64 k10 KL lt lt lt 60 amp MASK64 k11 KA lt lt lt 60 gt gt 64 k12 KA lt lt lt 60 amp MASK64 ke3 KL lt lt lt 77 gt gt 64 ke4 KL lt lt lt 77 amp MASK64 k13 KL lt lt lt 94 gt gt 64 k14 KL lt lt lt 94 amp MASK64 k15 KA lt lt lt 94 gt gt 64 k16 KA lt lt lt 94 amp MASK64 k17 KL lt lt lt 111 gt gt 64 k18 KL lt lt lt 111 amp MASK64 kw3 KA lt lt lt 111 gt gt 64 kw4 KA lt lt lt 111 amp MASK64 192 i 256 bit kw1 KL lt lt lt 0 gt gt 64 kw2 KL lt lt lt 0 amp MASK64 k1 KB lt lt lt 0 gt gt 64 k2 KB lt lt lt 0 amp MASK64 k3 KR lt lt lt 15 gt gt 64 k4 KR lt lt lt 15 amp MASK64 k5 KA lt lt lt 15 gt gt 64 k6 KA lt lt lt 15 amp MASK64 ke1 KR lt lt lt 30 gt gt 64 ke2 KR lt lt lt 30 amp MASK64 k7 KB lt lt lt 30 gt gt 64 k8 KB lt lt lt 30 amp MASK64 k9 KL lt lt lt 45 gt gt 64 k10 KL lt lt lt 45 amp MASK64 k11 KA lt lt lt 45 gt gt 64 k12 KA lt lt lt 45 amp MASK64 ke3 KL lt lt lt 60 gt gt 64 ke4 KL lt lt lt 60 amp MASK64 k13 KR lt lt lt 60 gt gt 64 k14 KR lt lt lt 60 amp MASK64 k15 KB lt lt lt 60 gt gt 64 k16 KB lt lt lt 60 amp MASK64 k17 KL lt lt lt 77 gt gt 64 k18 KL lt lt lt 77 amp MASK64 ke5 KA lt lt lt 77 gt gt 64 ke6 KA lt lt lt 77 amp MASK64 k19 KR lt lt lt 94 gt gt 64 k20 KR lt lt lt 94 amp MASK64 k21 KA lt lt lt 94 gt gt 64 k22 KA lt lt lt 94 amp MASK64 k23 KL lt lt lt 111 gt gt 64 k24 KL lt lt lt 111 amp MASK64 kw3 KB lt lt lt 111 gt gt 64 kw4 KB lt lt lt 111 amp MASK64 Shifruvannya red Shifruvannya vidbuvayetsya za shemoyu Fejstelya z 18 etapami dlya 128 bitnogo klyucha i 24 etapami dlya 192 i 256 bitnih klyuchiv Kozhni 6 etapiv zastosovuyutsya funkciyi FL i FLINV 128 bit D1 M gt gt 64 Zashifrovane povidomlennya dilitsya na dvi 64 bitni chastini D2 M amp MASK64 D1 D1 kw1 Poperednye zabilyuvannya D2 D2 kw2 D2 D2 F D1 k1 D1 D1 F D2 k2 D2 D2 F D1 k3 D1 D1 F D2 k4 D2 D2 F D1 k5 D1 D1 F D2 k6 D1 FL D1 ke1 FL D2 FLINV D2 ke2 FLINV D2 D2 F D1 k7 D1 D1 F D2 k8 D2 D2 F D1 k9 D1 D1 F D2 k10 D2 D2 F D1 k11 D1 D1 F D2 k12 D1 FL D1 ke3 FL D2 FLINV D2 ke4 FLINV D2 D2 F D1 k13 D1 D1 F D2 k14 D2 D2 F D1 k15 D1 D1 F D2 k16 D2 D2 F D1 k17 D1 D1 F D2 k18 D2 D2 kw3 Finalne zabilyuvannya D1 D1 kw4 C D2 lt lt 64 D1 192 i 256 bit D1 M gt gt 64 Zashifrovane povidomlennya dilitsya na dvi 64 bitni chastini D2 M amp MASK64 D1 D1 kw1 Poperednye zabilyuvannya D2 D2 kw2 D2 D2 F D1 k1 D1 D1 F D2 k2 D2 D2 F D1 k3 D1 D1 F D2 k4 D2 D2 F D1 k5 D1 D1 F D2 k6 D1 FL D1 ke1 FL D2 FLINV D2 ke2 FLINV D2 D2 F D1 k7 D1 D1 F D2 k8 D2 D2 F D1 k9 D1 D1 F D2 k10 D2 D2 F D1 k11 D1 D1 F D2 k12 D1 FL D1 ke3 FL D2 FLINV D2 ke4 FLINV D2 D2 F D1 k13 D1 D1 F D2 k14 D2 D2 F D1 k15 D1 D1 F D2 k16 D2 D2 F D1 k17 D1 D1 F D2 k18 D1 FL D1 ke5 FL D2 FLINV D2 ke6 FLINV D2 D2 F D1 k19 D1 D1 F D2 k20 D2 D2 F D1 k21 D1 D1 F D2 k22 D2 D2 F D1 k23 D1 D1 F D2 k24 D2 D2 kw3 Finalne zabilyuvannya D1 D1 kw4 C D2 lt lt 64 D1 Dopomizhni funkciyi F FL FLINV red F FL i FLINV funkciyi na vhid otrimuyut 2 64 bitnih parametra dani F IN i klyuch KE Funkciya F vikoristovuye 16 8 bitovih zminnih t1 t8 y1 y8 i 1 64 bitnu zminnu Na vihodi funkciyi 64 bitove chislo Funkciyi FL i FLINV vikoristovuyut 4 32 bitni zminni x1 x2 k1 k2 Na vihodi funkciyi 64 bitove chislo Funkciya FLINV obernena do FL F funkciya x F IN KE t1 x gt gt 56 t2 x gt gt 48 amp MASK8 t3 x gt gt 40 amp MASK8 t4 x gt gt 32 amp MASK8 t5 x gt gt 24 amp MASK8 t6 x gt gt 16 amp MASK8 t7 x gt gt 8 amp MASK8 t8 x amp MASK8 t1 SBOX1 t1 t2 SBOX2 t2 t3 SBOX3 t3 t4 SBOX4 t4 t5 SBOX2 t5 t6 SBOX3 t6 t7 SBOX4 t7 t8 SBOX1 t8 y1 t1 t3 t4 t6 t7 t8 y2 t1 t2 t4 t5 t7 t8 y3 t1 t2 t3 t5 t6 t8 y4 t2 t3 t4 t5 t6 t7 y5 t1 t2 t6 t7 t8 y6 t2 t3 t5 t7 t8 y7 t3 t4 t5 t6 t8 y8 t1 t4 t5 t6 t7 F OUT y1 lt lt 56 y2 lt lt 48 y3 lt lt 40 y4 lt lt 32 y5 lt lt 24 y6 lt lt 16 y7 lt lt 8 y8 FL funkciya var x1 x2 as 32 bit unsigned integer var k1 k2 as 32 bit unsigned integer x1 FL IN gt gt 32 x2 FL IN amp MASK32 k1 KE gt gt 32 k2 KE amp MASK32 x2 x2 x1 amp k1 lt lt lt 1 x1 x1 x2 k2 FL OUT x1 lt lt 32 x2 FLINV funkciya var y1 y2 as 32 bit unsigned integer var k1 k2 as 32 bit unsigned integer y1 FLINV IN gt gt 32 y2 FLINV IN amp MASK32 k1 KE gt gt 32 k2 KE amp MASK32 y1 y1 y2 k2 y2 y2 y1 amp k1 lt lt lt 1 FLINV OUT y1 lt lt 32 y2 S bloki red Znachennya funkciyi SBOX1 viznachayetsya iz nastupnoyi tablici 0 1 2 3 4 5 6 7 8 9 a b c d e f0 112 130 44 236 179 39 192 229 228 133 87 53 234 12 174 651 35 239 107 147 69 25 165 33 237 14 79 78 29 101 146 1892 134 184 175 143 124 235 31 206 62 48 220 95 94 197 11 263 166 225 57 202 213 71 93 61 217 1 90 214 81 86 108 774 139 13 154 102 251 204 176 45 116 18 43 32 240 177 132 1535 223 76 203 194 52 126 118 5 109 183 169 49 209 23 4 2156 20 88 58 97 222 27 17 28 50 15 156 22 83 24 242 347 254 68 207 178 195 181 122 145 36 8 232 168 96 252 105 808 170 208 160 125 161 137 98 151 84 91 30 149 224 255 100 2109 16 196 0 72 163 247 117 219 138 3 230 218 9 63 221 148a 135 92 131 2 205 74 144 51 115 103 246 243 157 127 191 226b 82 155 216 38 200 55 198 59 129 150 111 75 19 190 99 46c 233 121 167 140 159 110 188 142 41 245 249 182 47 253 180 89d 120 152 6 106 231 70 113 186 212 37 171 66 136 162 141 250e 114 7 185 85 248 238 172 10 54 73 42 104 60 56 241 164f 64 40 211 123 187 201 67 193 21 227 173 244 119 199 128 158Dlya prikladu SBOX1 0x7a 232 SBOX2 SBOX3 i SBOX4 viznachayutsya z SBOX1 nastupnim chinom SBOX2 x SBOX1 x lt lt lt 1 SBOX3 x SBOX1 x lt lt lt 7 SBOX4 x SBOX1 x lt lt lt 1 Rozshifruvannya red Algoritm rozshifruvannya identichnij shifruvannyu z tim lishe rozhodzhennyam sho dopomizhni klyuchi minyayutsya miscyami za nastupnoyu shemoyu v zalezhnosti vid dovzhini vihidnogo klyucha Rozmir klyucha128 bit 192 chi 256 bitkw1 lt gt kw3 kw1 lt gt kw3kw2 lt gt kw4 kw2 lt gt kw4k1 lt gt k18 k1 lt gt k24k2 lt gt k17 k2 lt gt k23k3 lt gt k16 k3 lt gt k22k4 lt gt k15 k4 lt gt k21k5 lt gt k14 k5 lt gt k20k6 lt gt k13 k6 lt gt k19k7 lt gt k12 k7 lt gt k18k8 lt gt k11 k8 lt gt k17k9 lt gt k10 k9 lt gt k16k10 lt gt k15k11 lt gt k14k12 lt gt k13ke1 lt gt ke4 ke1 lt gt ke6ke2 lt gt ke3 ke2 lt gt ke5ke3 lt gt ke4Priklad shifruvannya red Klyuch 0123456789abcdeffedcba9876543210Zashifrivane povidomlennya 0123456789abcdeffedcba9876543210Zashifrovane povidomlennya 67673138549669730857065648eabe43 Klyuchi k 1 ae71c3d55ba6bf1d k 2 169240a795f89256 k 3 a2b3c4d5e6f7ff6e k 4 5d4c3b2a19080091 k 5 e1eaadd35f8e8b49 k 6 2053cafc492b5738 k 7 79bdffdb97530eca k 8 8642002468acf135 k 9 d7e3a2d24814f2bf k 10 00123456789abcde k 11 d169240a795f8uckv k 12 6ae71c3d55ba6bf1 k 13 1d950c840048d159 k 14 e26af37bffb72ea6 k 15 e57e2495ab9c70f5 k 16 56e9afc745a49029 kw 1 0123456789abcdef kw 2 fedcba9876543210 kw 3 492b5738e1eaadd3 kw 4 5f8e8b492053cafc ke 1 56e9afc745a49029 ke 2 e57e2495ab9c70f5 ke 3 97530eca86420024 ke 4 68acf13579bdffdbKriptostijkist red Zastosuvannya red Pidtrimka Camellia bula dodana u finalnij versiyi Mozilla Firefox 3 v 2008 roci 2 Piznishe v tomu zh roci komanda rozrobnikiv FreeBSD ogolosila sho pidtrimka danogo shifruvannya takozh bula vklyuchena v FreeBSD 6 4 RELEASE U veresni 2009 roku GNU Privacy Guard dodali pidtrimku Camellia u versiyi 1 4 10 Krim togo bagato populyarnih bibliotek bezpeki taki yak Crypto GnuTLS PolarSSL i OpenSSL 3 takozh vklyuchayut v sebe pidtrimku Camellia Porivnyannya z analogami red Algoritm Kilkist logichnih elementiv Chas obchislennya klyuchiv ns Chas shifruvannya deshifruvannya ns Propuskna zdatnist Mb sShifruvannya deshifruvannya Klyuchi Povna kilkistDES 42 204 12 201 54 405 55 11 1161 31Triple DES 124 888 23 207 128 147 157 09 407 40MARS 690 654 2 245 096 2 935 754 1740 99 567 49 225 55RC6 741 641 901 382 1 643 037 2112 26 627 57 203 96Rijndael 518 508 93 708 612 834 57 39 65 64 1950 03Serpent 298 533 205 096 503 770 114 07 137 40 931 58Twofish 200 165 231 682 431 857 16 38 324 80 394 08Camellia 216 911 55 907 272 819 24 36 109 35 1170 55 4 Rozrobniki red Kazumaro Aoki Tetsuya Ichikawa Masayuki Kanda Mitsuru Matsui Shiho Moriai Junko Nakajima Toshio Tokita Nippon Telegraph and Telephone Corporation Mitsubishi Electric CorporationDiv takozh red Merezha Fejstelya Dodavannya po modulyu 2Primitki red Bug 1036765 Disable cipher suites that are not in the Browser Cipher Suite proposal that are still enabled Arhiv originalu za 3 lyutogo 2018 Procitovano 21 kvitnya 2018 Camellia cipher added to Firefox Mozilla in Asia Mozilla 30 lipnya 2009 Arhiv originalu za 29 lyutogo 2012 The Open Source Community OpenSSL Project Adopts the Next Generation International Standard Cipher Camellia Developed in Japan presreliz NTT 8 listopada 2006 Arhiv originalu za 8 bereznya 2008 Procitovano 29 lyutogo 2008 Kazumaro Aoki Tetsuya Ichikawa Masayuki Kanda Mitsuru Matsui Shiho Moriai Junko Nakajima and Toshio Tokita Camellia A 128 Bit Block Cipher Suitable for Multiple Platforms Design and AnalysisPosilannya red Oficijna storinka Camellia Arhivovano 6 travnya 2018 u Wayback Machine angl RFC 3713 Opis algoritmu Camellia angl RFC 3657 Vikoristannya algoritmu Camellia v CMS RFC 4312 Vikoristannya algoritmu Camellia v IPsec Priklad programnoyi realizaciyi Arhivovano 26 veresnya 2011 u Wayback Machine angl Porivnyannya shvidkosti shifruvannya riznih algoritmiv Arhivovano 15 zhovtnya 2008 u Wayback Machine angl Otrimano z https uk wikipedia org w index php title Camellia algoritm amp oldid 35373622