[Resource Topic] 2001/078: The COS Stream Ciphers are Extremely Weak

Welcome to the resource topic for 2001/078

The COS Stream Ciphers are Extremely Weak

Authors: Steve Babbage


A new family of very fast stream ciphers called COS (for “crossing over system”) has been proposed by Filiol and Fontaine, and seems to have been adopted for at least one commercial standard. In this note we show that the COS ciphers are very weak indeed — it requires negligible effort to reconstruct the state of the keystream generator from a very small amount of known keystream.

ePrint: https://eprint.iacr.org/2001/078

See all topics related to this paper.

Feel free to post resources that are related to this paper below.

Example resources include: implementations, explanation materials, talks, slides, links to previous discussions on other websites.

For more information, see the rules for Resource Topics .