Designs, Codes and Cryptography

, Volume 12, Issue 3, pp 283–316

Constructing Symmetric Ciphers Using the CAST Design Procedure

  • Carlisle M. Adams

DOI: 10.1023/A:1008229029587

Cite this article as:
Adams, C.M. Designs, Codes and Cryptography (1997) 12: 283. doi:10.1023/A:1008229029587


This paper describes the CAST design procedure for constructing a family of DES-like Substitution-Permutation Network (SPN) cryptosystems which appear to have good resistance to differential cryptanalysis, linear cryptanalysis, and related-key cryptanalysis, along with a number of other desirable cryptographic properties. Details of the design choices in the procedure are given, including those regarding the component substitution boxes (s-boxes), the overall framework, the key schedule, and the round function. An example CAST cipher, an output of this design procedure, is presented as an aid to understanding the concepts and to encourage detailed analysis by the cryptologic community.

design of encryption algorithmsblock cipherssubstitution boxeskey schedulingdifferential cryptanalysislinear cryptanalysis

Copyright information

© Kluwer Academic Publishers 1997

Authors and Affiliations

  • Carlisle M. Adams
    • 1
  1. 1.Entrust TechnologiesOttawaCanada