April 2014
« Oct    

Recent Posts

DiceLock-x for Linux, ARC4_Discarding class (ARC 4 Discarding stream cipher algorithm) verified with IETF RFC 6229, 128 bit key, set 1 and PhysicalCryptoRandomStream class (memory pages kept in RAM, not swapped to file)

DiceLock-x for Linux is the cryptographic architecture that ensures that ciphertext it’s not just encrypted but also randomized.

DiceLock cipher architecture presents two main configurations:
Dicelock Digested, and
Dicelock Indexed.

DiceLock encryption architecture improves symmetric ciphers like block cipher as Advanced Encryption Standard, Camellia, Serpent, Twofish (128, 192 and 256 bit key lengths) with different block cipher operation modes (like CBC, CFB, OFB and XTS) and stream ciphers as HC 128, HC 256, Rabbit, Salsa 20/20, Sosemanuk and others.

DiceLock (both configurations) makes use of the following random number tests: Frequency Test, Block Frequency Test, Cumulative Sum Forward Test, Cumulative Sum Reverse Test, Runs Test, Longest Run Of Ones Test, Rank Test, Universal Test, Approximate Entropy Test, Serial Test and Discrete Fourier Transform Test.

Additionally DiceLock Digested configuration makes use currently of following hash digest algorithms: Sha 1, Sha 224, Sha 256, Sha 384, Sha 512, Ripemd 128, Ripemd 160, Ripemd 256, Ripemd 320, Md2, Md4 and Md5.

Previous version DiceLock-x for Linux incorporated XTS-AES (XEX-based tweaked-codebook mode with ciphertext stealing XTS block cipher operation mode algorithm) for Advanced Encryption Algorithm (AES) for 128 and 256 bit symmetric keys.

New version DiceLock-x for Linux has made significant improvements:
- added block encryption ciphers like Camellia, Serpent and Twofish with all accepted key lengths of 128, 192 and 256 bits,
- added stream ciphers like Rabbit, Salsa 20/20 with 128 and 256 bit key lengths, and general Sosemanuk, as well as Sosemanuk with 128 and 256 bit key lengths,
- added old hash algorithms like Message Digest 2, Message Digest 4 and Message Digest 5,
- modified DiceLockIndexed and DiceLockDigested classes to be used with encryption ciphers that does not make use of initialization vector (IV),
- created DiceLockIVDigested and DiceLockIVIndexed classes to be used with encryption ciphers that makes use of initialization vector (IV),
- extended DiceLockXTSDigested and DiceLockXTSIndexed classes to be use with newly added Camellia, Serpent and Twofish block ciphers and all three key lengths (128, 192 and 256 bit key lengths),
- added old encryption ciphers like DEA (Data Encryption Algorithm), TDEA (Triple Data Encryption Algorithm), and ARC4 (alleged RC4) for compatibillity reasons.

As the new version DiceLock-x for Linux is developed, all individual components must be tested and verified, and in this article we verify ARC 4 Discarding class (computing ARC 4 Discarding stream cipher algorithm).

At the bottom of the post you can find C++ source code being used to perform this test.

Verified DiceLock-x for Linux

Verification components:

– Stream encryption cipher algorithm: ARC4_Discarding class
– Discarded initial bytes: 1536
– Test set: IETF RFC 6229, 128 bit key, set 1
– Bit stream memory management: PhysicalCryptoRandomStream class (memory pages kept in RAM, not swapped to file)

Memory characteristic used in this test:

PhysicalCryptoRandomStream class makes use of AWE (Address Windowing Extensions) that uses physical nonpaged memory, so memory is not swapped to hard disk.
In order to use PhysicalCryptoRandomStream class, which works with AWE it requires that “Lock Pages In Memory” Windows security setting policy permission must be granted in “Local Policy Settings” to the account executing the program, and in some versions the program must have “Run this program as an administrator” “Privilege Level” option checked.


Input plaintext: 4112 zero bytes
Key: 0102030405060708090a0b0c0d0e0f10

Once computed we’ve got the following results:

Byte offset: 0
Expected ffa0b514647ec04f6306b892ae661181
Computed ffa0b514647ec04f6306b892ae661181
Result: OK
Byte offset: 496
Expected d03d1bc03cd33d70dff9fa5d71963ebd
Computed d03d1bc03cd33d70dff9fa5d71963ebd
Result: OK
Byte offset: 512
Expected 8a44126411eaa78bd51e8d87a8879bf5
Computed 8a44126411eaa78bd51e8d87a8879bf5
Result: OK
Byte offset: 1520
Expected fabeb76028ade2d0e48722e46c4615a3
Computed fabeb76028ade2d0e48722e46c4615a3
Result: OK
Byte offset: 1536
Expected c05d88abd50357f935a63c59ee537623
Computed c05d88abd50357f935a63c59ee537623
Result: OK
Byte offset: 2544
Expected ff38265c1642c1abe8d3c2fe5e572bf8
Computed ff38265c1642c1abe8d3c2fe5e572bf8
Result: OK
Byte offset: 2560
Expected a36a4c301ae8ac13610ccbc12256cacc
Computed a36a4c301ae8ac13610ccbc12256cacc
Result: OK
DECIPHERING Checking deciphered text with input plaintext: OK

DiceLock-x for Linux C++ source code used in this test:

DiceLock-x for Linux


So, DiceLock cipher test and analysis can go on …

DiceLock is a trademark or registered trademark of his owner where applies. DiceLock research is the research to implement Self-corrector randomisation-encryption and method, european patent EP1182777 granted 08/21/2003 and US patent US7508945 granted 03/24/2009.

Leave a Reply