Score:10

Notable Non-Western Cryptosystems that have been widely deployed?

ng flag

I was recently watching Sneakers (which Len Adleman advised on their "cryptography" sub-plot), which included a line along the lines of:

[Some hardware that ostensibly breaks American cryptography] doesn't work against Russian codes.

The speech that Adleman advised on seems vaguely like a description of a more powerful Number Field Sieve [1], so this would be consistent with Russia having standardized something like McEliece. Of course, I doubt they have done this, but in thinking about this I realized I have no clue what they have standardized, and therefore no clue if this was a plot hole, or excellent writing.

This leads to the broader question: Are there cryptosystems that have not been widely adopted in the West, that have been standardized by other major countries?

I'll include a handful of examples that I am aware of:

  • The Lattice-based KEM LAC was recently chosen in China's variant of the NIST PQC competition.
  • There are the Russian block ciphers GOST, and on Kuznyechik.

In this question I am mostly interested in historical example though (so of the above, mostly interested in GOST). Are there other well-known examples? I would especially be interested in asymmetric schemes, given the motivation to better understand Sneakers.


[1] Funnily enough, this came out ~ 1 year before the general number field sieve was published, but Adleman was not on that paper.

kelalaka avatar
in flag
I think this question covers yours, too. [Do any non-US ciphers exist?](https://crypto.stackexchange.com/q/11278/18298), Though 7 years old.
Mark avatar
ng flag
@kelalaka Thanks, this seems like a good reference on the symmetric side of things.
et flag
I thought Russia was part of the Western World. Russia isn't eastern, it isn't Arab, it isn't African, it isn't Latin American. So I think it's part of the Western World
et flag
@PaulUszak - Russia is a big country. It spans both Northern Asia & Eastern Europe. However, that's a continent based classification. My point is about the phrase "Western World". In general, the world is classified into Western, Eastern, Arabic, African & Latin American. The Western World is also called Occidental & Eastern as Oriental. I have never heard of Russia being referred to as part of the Eastern World or called Oriental.
Paul Uszak avatar
cn flag
@user93353 Actually no. Europe officially stops at the Urals. Everything **east** of the Ural mountains is officially Asia. (Sorry, wrong side)
et flag
@PaulUszak - as I said before, which Continent Russia lies in doesn't determine whether it's part of the eastern or western world.
cn flag
@user93353 *Western* here references a cold war faction and ideology, "capitalistic democracies" US, Western Europe and their allies on one side, and "communist" Russia, Eastern Europe and their allies on the other. While the name references the iron curtain dividing Europe (with Russia being east of the divide), it's not just about geography, I'd consider Australia/NZ "Western".
et flag
@CodesInChaos - That's Western Bloc & Eastern Bloc. And if he means that, he is asking for encryption systems used in communist countries?
Score:8
vn flag

Are there cryptosystems that have not been widely adopted in the West, that have been standardized by other major countries?

Camellia is a block cipher similar in performance and security to AES. It was standardized by Japan's CRYPTREC and although various Western countries have standardized implementations of it, it is quite uncommonly used in the West. In 2014, Firefox disabled support for it in TLS.

Score:6
sa flag

Chinese Standards:

Identity Based Encryption:

SM9 is a Chinese national cryptography standard for Identity Based Cryptography issued by the Chinese State Cryptographic Authority in March 2016 including asymmetric encryption, digital signature, key encapsulation and key wrapping algorithms.

See the eprint paper here

Block Cipher:

SM4 (formerly SMS4) is a block cipher used in the Chinese National Standard for Wireless LAN WAPI (Wired Authentication and Privacy Infrastructure).

The SM4 algorithm was declassified in January, 2006, and it became a national standard (GB/T 32907-2016) in August 2016. See the internet draft here

Russian Standards:

I have seen no evidence (it doesn't mean there is none) that any public key schemes were standardised in Russia prior to 2001.

However, there is the following digital signature standard using Elliptic Curve cryptography:

GOST R 34.10–2012

GOST R 34.10-2012 describes the generation and verification processes for digital signatures, based on operations with an elliptic curve points group, defined over a prime finite field.

The necessity for developing this standard is caused by the need to implement digital signatures of varying resistance due to growth of computer technology. Digital signature security is based on the complexity of discrete logarithm calculation in an elliptic curve points group and also on the security of the hash function used (according to GOST R 34.11-2012 [GOST3411-2012]).

This document refers to an earlier standard GOST R 34.11-2001 which is also elliptic curve based.

Disclaimer: I haven't the time to check whether these are not simply local copies of ISO standards.

mangohost

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.