sid-sun / codemkii Goto Github PK

codeMKII was never intended to be or as far as I know, used for any real encryption, it is only an exploratory project. This work always shipped "WITHOUT WARRANTY OF ANY KIND" yet I would like to clear any misunderstandings, recently I found an exploit that the algorithm is susceptible to without any intention of finding an exploit so there are possibly more if one were to try.

Now as to why it is not secure:
This algorithm is susceptible to related key exploits with conformation of the exploit working with small keys (possibly big keys too which are similar enough) because the entropy is not high enough

And as per efficiency, the algorithm converts each character of message into many cipher characters which is not ideal among other things.

To counteract the issue of related keys, one might do rounds with parts of secret that could be extracted with SHA treating them as round keys and making a new SPP with each round key which would change the algorithm and break backwards compatibility and major re-write which I do not yet intend to do.

I am instead focusing my efforts towards a new algorithm (also symmetric) timeline for which is not yet defined as there is considerable amount of research going towards the effort before starting the actual algorithm development. The new algorithm will not be released under the same name or name scheme.

This is not ideal, at all.