Score:0

Which is best: RC5, RC6, CAST-128, LOKI97, or MARS?

cn flag

Considering speed and security, which is best: RC5, RC6, CAST-128, LOKI97, or MARS?

What does the scoreboard look like?

(I'm asking about the abstract math concept, not related to any code implementation. However, hearing about code implementations would be interesting.)

SAI Peregrinus avatar
si flag
Why these? Why not SHA2, SHA3, Blake2, and Blake3?
Donald C. Spencer avatar
cn flag
Well, mine is a "no profit" question. Basically im asking just to know more about these ciphers compared, im not gonna use them for anything
Score:3
ng flag

CAST-128 has 64-bit block size. Such block size is obsolete. Don't use such block size (thus don't use CAST-128), unless you must.

LOKI97 is broken, see Lars R. Knudsen & Vincent Rijmen's Weaknesses in LOKI97. Don't use it.

RC5 with it's originally suggested parameters (64-bit block size, 128-bit key, 12 rounds) is broken, see Alex Biryukov & Eyal Kushilevitz's Improved cryptanalysis of RC5. Although that paper suggests parameters for the 128-bit block version, I'll pretend RC5 is obsoleted by RC6.

This leaves MARS and RC6 as competitors. Neither algorithm is close to broken AFAIK. They have been discussed and compared by NIST's Report on the Development of the Advanced Encryption Standard (AES). RC6 is found to be faster, significantly so in hardware. RC6 is simpler in my view, but it has one drawback: it uses variable rotation, which is hard to make fast and constant-time on some low-end CPUs lacking a barrel shifter (including modern CPUs, e.g. some variants of ARM Cortex M0).

If I desperately needed a block cipher (ruling out a simpler stream cipher like ChaCha) and for some reason was facing the choice in the question (thus could not use AES/Rijndael), I'd probably use MARS, unless speed was paramount and I knew for certain no CPU lacking a barrel shifter would ever be used (in which case I'd consider RC6)

Addition: If I was stuck to a 64-bit block cipher among those of the question, I may use CAST-128: it's unbroken AFAIK, and even endorsed by ISO/IEC 18033-3:2010, reviewed 2020.

Donald C. Spencer avatar
cn flag
Thats pretty clear, thanks! Just a little question, you wrote that both CAST128 and RC5 are obsolate, so, if you would pick one of them which one would you get? why?
mangohost

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.