Block ciphers
The half with rounds, S-boxes and key schedules. These take the UTF-8 bytes of the whole text and hand back hex, so case, spaces and punctuation are just more bytes. Each one is pinned to published test vectors, from a standard, the original paper or another implementation, and its page says which. They're teaching code though, written to be read and checked, not constant time. Don't guard real data with them, use your platform's crypto for that.
| Options | Keyspace | ||
|---|---|---|---|
| AES (ECB)aes | SP network | key | 2^128, 2^192 or 2^256 |
| AES (CBC)aes-cbc | SP network | key, iv | 2^128, 2^192 or 2^256 |
| AES (CFB)aes-cfb | SP network | key, iv, segment? | 2^128, 2^192 or 2^256 |
| AES (OFB)aes-ofb | SP network | key, iv | 2^128, 2^192 or 2^256 |
| AES (CTR)aes-ctr | SP network | key, iv | 2^128, 2^192 or 2^256 |
| AES (CCM)aes-ccm | SP network | key, nonce, aad?, tagLength? | 2^128, 2^192 or 2^256 |
| AES (OCB)aes-ocb | SP network | key, nonce, aad?, tagLength? | 2^128, 2^192 or 2^256 |
| AES (LRW)aes-lrw | SP network | key, tweak? | 2^256, 2^320 or 2^384 |
| AES (XTS)aes-xts | SP network | key, tweak? | 2^256 or 2^512 |
| AES (CBC-MAC)aes-cbc-mac | SP network | key | 2^128, 2^192 or 2^256 |
| Rijndael (ECB)rijndael | SP network | key, blockSize? | 2^128 to 2^256 |
| DES (ECB)des | Feistel | key | 2^56 |
| DESX (ECB)desx | Feistel | key | 2^184 |
| Triple DES (ECB)triple-des | Feistel | key | 2^112 or 2^168 |
| Triple DES (CBC)triple-des-cbc | Feistel | key, iv | 2^112 or 2^168 |
| Blowfish (ECB)blowfish | Feistel | key | 2^32 to 2^448 |
| IDEA (ECB)idea | Lai-Massey | key | 2^128 |
| Lucifer (ECB)lucifer | Feistel | key | 2^128 |
| MARS (ECB)mars | Feistel | key | 2^128 to 2^448 |
| Serpent (ECB)serpent | SP network | key | 2^128, 2^192 or 2^256 |
Conventions they share
- The key is hex, and so is every IV, nonce and tweak. Lengths are checked before the first block.
- ECB, CBC and the MAC pad with PKCS#7. CFB, OFB, CTR, CCM, OCB and XTS need no padding, the ciphertext has as many bytes as the text. CBC-MAC pads with zeros for the tag and returns the text bytes as they are.
- CCM, OCB and CBC-MAC append a tag. Decoding with a wrong one throws, and no plaintext comes back at all.
preserveCaseandstripNonAlphadon't apply. There are no letters here, only bytes.
Families
Substitution-permutation is rounds of byte substitution and mixing under a key: AES in every mode here, Rijndael with its wider blocks, and Serpent, which runs its 4-bit S-boxes bitslice. Feistel splits the block in half and runs one half through a keyed function into the other, round after round. DES, DESX and Triple DES build on it, Blowfish grows its S-boxes from the key and pi, Lucifer is the IBM cipher DES was cut down from, and in MARS one of four words drives the other three each round. Lai-Massey splits the block too, but feeds the difference of the two halves through a keyed function and XORs the result into both. Its only member is IDEA, which gets by without a single table.