It is not worth standard. From my point of view, seems much more that they developed part of old Magma (GOST 28147-89) and combined together with the AES optimized for 64-bit - Kuznechik (GOST R 34.12-2015). Also, the Streebog and Stribob are quite good. https://eprint.iacr.org/2015/096.pdf https://eprint.iacr.org/2015/347.pdf https://eprint.iacr.org/2015/812.pdf Also the http://gostcrypto.com/ - GOST mean the gosudarstvennyy standart / государственный стандарт Jan Dne 22.10.2016 v 19:13 stef napsal(a):
On Sat, Oct 22, 2016 at 02:11:02PM +0300, Sergey Matveev wrote:
Current standards are standards, not "western standards". There is no "world" or "common" standards. Standards are always related to something.
And why should we use somehing like this: https://eprint.iacr.org/2016/071.pdf? What is the problem? S-box is not randomly chosen? Does it hurt this blockcipher security? No. in fact according to the abstract of that paper:
"However, the small 4-bit S-Boxes do not have very good cryptographic properties. In fact, one of them has a probability 1 differential. "
is the abstract wrong?