Designs, Codes and Cryptography

, Volume 12, Issue 3, pp 283-316

Constructing Symmetric Ciphers Using the CAST Design Procedure

  • Carlisle M. AdamsAffiliated withEntrust Technologies

Rent the article at a discount

Rent now

* Final gross prices may vary according to local VAT.

Get Access


This paper describes the CAST design procedure for constructing a family of DES-like Substitution-Permutation Network (SPN) cryptosystems which appear to have good resistance to differential cryptanalysis, linear cryptanalysis, and related-key cryptanalysis, along with a number of other desirable cryptographic properties. Details of the design choices in the procedure are given, including those regarding the component substitution boxes (s-boxes), the overall framework, the key schedule, and the round function. An example CAST cipher, an output of this design procedure, is presented as an aid to understanding the concepts and to encourage detailed analysis by the cryptologic community.

design of encryption algorithms block ciphers substitution boxes key scheduling differential cryptanalysis linear cryptanalysis