1. The document discusses network security and provides details about stream ciphers and block ciphers. It explains how each type of cipher works and provides examples of each. 2. Details are given about the Feistel cipher structure and how it provides diffusion and confusion through repeated rounds. The Data Encryption Standard (DES) algorithm is described as a prominent example of a Feistel cipher. 3. Principles of block cipher design are outlined, emphasizing the importance of number of rounds, design of the round function F, and the key schedule algorithm in providing security.

1. NETWORK SECURITY
Name of the Staff : M.FLORENCE DAYANA M.C.A.,M.Phil.,(Ph.D).,
Head, Dept. of CA
Bon Secours College For Women
Thanjavur.
Class : II MSc., CS
Semester : III
Unit : I
Topic : Block Ciphers and the Data Encryption Standard
2/15/20191

2. Stream Cipher
Encrypts a digital data
stream one bit or one
byte at a time
Examples:
•Autokeyed
Vigenère
cipher
•Vernam cipher
A stream cipher is a symmetric
key cipher where plaintext digits
are combined with
a pseudorandom cipher digit
stream (keystream)
In a stream cipher each plain
text is encrypted one at a
time with the corresponding
digit of the key stream, to
give a digit of the cipher text
stream.
An alternative name is a state
cipher, as the encryption of
each digit is dependent on
the current state.
In practice, a digit is typically
a bit and the combining
operation an exclusive -
or (XOR).
For practical reasons the bit-
stream generator must be
implemented as an algorithmic
procedure so that the
cryptographic bit stream can
be produced by both users
It must be computationally
impractical to predict
future portions of the bit
stream based on previous
portions of the bit stream
The two users need
only share the
generating key and
each can produce the
key stream

3. Example Stream Ciphers

4. Block Cipher
A block of plaintext is
treated as a whole
and used to produce
a ciphertext block of
equal length
Typically a block size of
64 or 128 bits is used
As with a stream
cipher, the two users
share a symmetric
encryption key
The majority of network-
based symmetric
cryptographic
applications make use of
block ciphers

5. Example Block Ciphers

6. StreamCipher
andBlockCipher

7. A block cipher operates on a plaintext block of n bits to
produce a ciphertext block of n bits. There are 2n possible
different plaintext blocks and, for the encryption to be
reversible (i.e., for decryption to be possible), each must
produce a unique ciphertext block. Such a transformation is
called reversible, or nonsingular.

8. Table 3.1
Encryption and Decryption Tables for Substitution Cipher of Figure 3.2

9. The Feistel Cipher
• Feistel cipher is the execution of two or more
simple ciphers in sequence in such a way that the
final result or product is cryptographically stronger
than any of the component ciphers.
• Feistel ciphers are a special class of iterated block
ciphers where the ciphertext is calculated from the
plaintext by repeated application of the same
transformation or round function.

10. THE FEISTEL CIPHER
• In a Feistel cipher, the text being encrypted is split
into two halves. The round function f is applied to
one half using a subkey and the output of f is
exclusive ORed with other half.
• The two halves are then swapped. Each round
follows the same pattern except for the last round
there is no swap
• A nice feature of a feistel cipher is that encryption
and decryption are structurally identical, though the
subkeys used during encryption at each round are
taken in reverse order during decryption

11. Feistel Cipher
• Proposed the use of a cipher that alternates
substitutions and permutations
• Feistel is a practical application of a proposal to develop
a product cipher that alternates confusion and diffusion
functions
• Each plaintext element or group of elements is
uniquely replaced by a corresponding ciphertext
element or group of elements
Substitutions
• No elements are added or deleted or replaced in
the sequence, rather the order in which the
elements appear in the sequence is changed
Permutation

12. Diffusion and Confusion
• Diffusion means that if we change a character of the plaintext, then
several characters of the ciphertext should change, and similarly, if we
change a character of the ciphertext, then several characters of the
plaintext should change
• diffusion refers to dissipating(unwanted) the statistical structure
of plaintext over bulk of ciphertext.
Diffusion
• Confusion means that each binary digit (bit) of the ciphertext should
depend on several parts of the key, obscuring the connections between
the two.
• Confusion means that each character of the ciphertext should depend on
several parts of the key.
Confusion

13. THE FEISTEL CIPHER
1. The inputs to the encryption algorithm
are a plaintext block of length 2w bits
and a key k.
2. The plaintext block is divided into two
halves L0,R0.
3. The two halves of the data pass through
n rounds of processing and then combine
to produce the ciphertext block.
4. Feistel Cipher Structure each round
i has an inputs Li-1 and Ri-1 derived from
the previous round, as well as the subkey
ki, derived from the overall k.

14. In Figure, 16 rounds are used, although any number of rounds
could be implemented.
All rounds have the same structure.
A substitution is performed on the left half of the data.
 This is done by applying a round function F to the right half of the
data and then taking the Exclusive-OR of the output of that function
and the left half of the data.
The round function has the same general structure for each round but
is parameterized by the round subkey Ki .
 Another way to express this is to say that F is a function of right-half
block of w bits and a subkey of y bits, which produces an output
value of length w bits: F (REi , Ki+1 ).
Following this substitution, a permutation is performed that consists
of the interchange of the two halves of the data.
 This structure is a particular form of the Substitution-Permutation
Network (SPN) proposed by Shannon.

15. Feistel Cipher Design Features
Block size
• Larger block sizes mean greater security
but reduced encryption/decryption
speed for a given algorithm
Key size
• Larger key size means greater security
but may decrease encryption/decryption
speeds
Number of rounds
• The essence of the Feistel cipher is that
a single round offers inadequate
security but that multiple rounds offer
increasing security. A typical size is 16
rounds.
Subkey generation algorithm
• Greater complexity in this algorithm
should lead to greater difficulty of
cryptanalysis
• Round function F
• Greater complexity generally means
greater resistance to cryptanalysis
Fast software encryption/decryption
• In many cases, encrypting is
embedded in applications or utility
functions in such a way as to make
impossible a hardware
implementation; accordingly, the
speed of execution of the algorithm
becomes a concern software
Ease of Analysis
• If the algorithm can be concisely and
clearly explained, it is easier to
analyze that algorithm for
cryptanalytic vulnerabilities and
therefore develop a higher level of
assurance as to its strength

16. Feistel Example
This figure shows the 15th round of encryption and 2nd round of
decryption. The 14th round value is LE14=DE7F and RE14=03A6 and the
key value is K15=12DE52. after the round 15 we have LE15=03A6 and
RE15=F(03A6,12DE52)xorDE7F.

17. Data Encryption Standard (DES)
• The DES was once a predominant symmetric
key algorithm for the encryption data. It was
highly influential in the advancement of
modern cryptography in the academic world.
• Issued in 1977 by the National Bureau of
Standards as Federal Information Processing

18. Data Encryption Standard (DES)
• Algorithm itself is referred to as the Data Encryption
Algorithm (DEA)
• There are two inputs to the encryption function. The
plaintext to be encrypted and the key.
• Data are encrypted in 64-bit blocks using a 56-bit key
• The algorithm transforms 64-bit input in a series of
steps into a 64-bit output
• The same steps, with the same key, are used to
reverse the encryption

20. 6.20
DES is a block cipher
Figure Encryption and decryption with DES

21. 6.21
Figure General structure of DES

22. DES Encryption Algorithm
1. The left hand side of the figure, the
plaintext proceeds in three phases.
2.First, 64 bit plaintext passes
through an initial permutation(IP)
that rearranges the bit produce the
permuted input.
3. The phase consisting of sixteen
rounds of the same function, which
involves both permutation and
substitution functions.
4. The output of the last round
consists of 64 bits that are a function
of input plaintext and a key.
5. The left & right halves of the
output are swapped to produce the
pre-output.

23. 6. Finally, the pre-output is passed through permutation
[IP-1] that is inverse of the initial permutation function, to
produce the 64 bit ciphertext.
7. The right hand side portion, in which the 56 bit key is
used. Initially the key is passed through a permutation
function.
8. Then for each 16 rounds, a subkey(Ki) is produced a
combination of a left circular shift and a permutation.
9.This is same for each round. But different subkey is
produced because the repeated shift of the key bits

24. DES Example
THE AVALANCHE EFFECT
The avalanche effect refers to a desirable property of
cryptographic algorithms, typically block ciphers and cryptographic
hash functions.
The avalanche effect is evident if, when an input is changed slightly
(for example, flipping a single bit) the output changes significantly
(e.g., half the output bits flip).
In the case of high-quality block ciphers, such a small change in
either the key or the plaintext should cause a drastic change in
the ciphertext.
It means that a very small change in the input will lead to a very big change
in the output. The avalanche effect is calculated by:

25. Avalanche in DES
original
modified

28. THE STRENGTH OF DES
1. The use of 56-bit keys:
In computing, 56-bit encryption refers to a key
size of fifty-six bits, or seven bytes, for symmetric
encryption, with the key length of 56 bits, there are 256
possible keys, which is approximately 7.2 * 106 keys.
On average, half of the key space has to be searched, a
single machine performing one DES encryption per micro
second would take more than a thousand years to break the
cipher.

29. 2. The Nature of the DES algorithm:
The focus of concern has been on the eight
substitution tables, S-Boxes, that are used in each
iteration.
Because the design criteria for these boxes, and indeed for
the entire algorithm, were not made public, there is a
suspicion that the boxes were constructed in such a way
that cryptanalysis is possible for an opponent who knows
the weakness in the S-boxes.
Strength of DES

30. Strength of DES
3. Timing attacks
• The timing attacks relate to public key algorithms.
• The timing attack is one in which information about the
key or the plaintext is obtained by observing how long it
takes a given implementation to perform decryptions on
various ciphertexts
• The timing attack Exploits the fact that an encryption
or decryption algorithm often takes slightly different
amounts of time on different inputs

31. Block Cipher Design Principles:
we much progress has been made in designing block ciphers that are
cryptographically strong, the basic principles have not changed.
we look three critical aspects of block cipher design
1. The number of Rounds
2. Design of function F
3.Key schedule algorithm 1. Number of rounds
The greater the number
of rounds, the more
difficult it is to perform
cryptanalysis
In general, the criterion
should be that the
number of rounds is
chosen so that known
cryptanalytic efforts
require greater effort
than a simple brute-force
key search attack
If DES had 15 or fewer
rounds, differential
cryptanalysis would
require less effort than a
brute-force key search

32. Block Cipher Design Principles:
2. Design of Function F
• The heart of a Feistel
block cipher is the
function F
• The more nonlinear F,
the more difficult any
type of cryptanalysis will
be
• The SAC and BIC
criteria appear to
strengthen the
effectiveness of the
confusion function
Strict avalanche
criterion (SAC)
States that any
output bit j of an
S-box should
change with
probability 1/2
when any single
input bit i is
inverted for all i , j
Bit
independence
criterion (BIC)
States that
output bits j and
k should change
independently
when any single
input bit i is
inverted for all i ,
j , and k
The algorithm should have good
avalanche properties

33. Block Cipher Design Principles:
3. Key Schedule Algorithm
• With any Feistel block cipher, the key is used to
generate one subkey for each round
• In general, we would like to select subkeys to
maximize the difficulty of deducing individual
subkeys and the difficulty of working back to the
main key
• It is suggested that, at a minimum, the key
schedule should guarantee key/ciphertext Strict
Avalanche Criterion and Bit Independence
Criterion